Executive brief
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.
Affected products
- PyPI werkzeug
Junglewise Threat Intelligence
CVE-2019-14806: PYSEC-2019-140 - Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same mac
CVE-2019-14806 · Severity: low · CVSS 3.1 · Published 2019-08-09
Technologies: werkzeug (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2044 - Werkzeug safe_join() allows Windows special device names with compound extensions
- PYSEC-2026-2046 - Werkzeug safe_join() allows Windows special device names
- PYSEC-2026-2045 - Werkzeug safe_join not safe on Windows
- PYSEC-2026-2043 - Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
- PYSEC-2026-1065 - Pallets Werkzeug vulnerable to Path Traversal