Executive brief
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.
Affected products
- PyPI werkzeug
Junglewise Threat Intelligence
PYSEC-2019-70 - Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same mac
Severity: info · Published 2019-08-09
Technologies: werkzeug (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2044 - Werkzeug safe_join() allows Windows special device names with compound extensions
- PYSEC-2026-2046 - Werkzeug safe_join() allows Windows special device names
- PYSEC-2026-2045 - Werkzeug safe_join not safe on Windows
- PYSEC-2026-2043 - Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
- PYSEC-2026-1065 - Pallets Werkzeug vulnerable to Path Traversal