Docker Hub flaw let attackers impersonate users, tamper with images

Nyxfrom the container-auth-oops dept.

Docker Hub had a critical flaw that allowed attackers to access other users' container repositories and modify images using a personal access token. The vulnerability affected Docker Hub's authentication system. Anyone relying on Docker Hub to store or distribute container images should review access logs and rotate tokens.

Read the original on www-bleepingcomputer-com.cdn.ampproject.org