[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2NlM-WyM2r_5UCbbMpZOx_bp5pSBOdOHWaRDPgu_iJI":3,"g5a-risk:CVE-2014-6407":139},{"success":4,"data":5,"meta":137},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":48,"references":49,"referencesCount":86,"weaknesses":87,"weaknessesCount":95,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":135,"notableEvents":136},"CVE-2014-6407","What is CVE-2014-6407?","Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.","Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image arch...","2014-12-12T15:59:04.337","2026-06-17T00:13:01.483",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.04909,[34,34,34,34,34,34,34],"High",[38,42,45],{"vendor":39,"product":39,"version":40,"criteria":41,"vulnerable":4},"docker","*","cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",{"vendor":39,"product":39,"version":43,"criteria":44,"vulnerable":4},"1.0.0","cpe:2.3:a:docker:docker:1.0.0:*:*:*:*:*:*:*",{"vendor":39,"product":39,"version":46,"criteria":47,"vulnerable":4},"1.3.0","cpe:2.3:a:docker:docker:1.3.0:*:*:*:*:*:*:*",3,[50,54,58,62,65,69,74,76,78,80,82,84],{"url":51,"source":52,"tags":53},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2014-December\u002F145154.html","Fedoraproject",[],{"url":55,"source":56,"tags":57},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2014-12\u002Fmsg00009.html","Opensuse",[],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F60171","Secunia",[],{"url":63,"source":60,"tags":64},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F60241",[],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2014\u002F11\u002F24\u002F5","Openwall",[],{"url":70,"source":71,"tags":72},"https:\u002F\u002Fdocs.docker.com\u002Fv1.3\u002Frelease-notes\u002F","Docker",[73],"Vendor Advisory",{"url":51,"source":52,"tags":75},[],{"url":55,"source":56,"tags":77},[],{"url":59,"source":60,"tags":79},[],{"url":63,"source":60,"tags":81},[],{"url":66,"source":67,"tags":83},[],{"url":70,"source":71,"tags":85},[73],12,[88],{"id":89,"name":90,"description":91,"extendedDescription":27,"status":92,"abstraction":93,"structure":94},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","Draft","Base","Simple",1,[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2014-6407? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2014-6407, a high severity cyber security vulnerability from 2014. Docker before 1.3.2 allows remote attackers to write to arbi...","CVE-2014-6407, CVE-2014-6407 vulnerability, CVE-2014-6407 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, docker security, docker vulnerability","\u002Fwhat-is\u002Fcve-2014-6407",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":10,"dateModified":11,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2014-6407","Cybersecurity","CVE-2014-6407, CVE-2014-6407 vulnerability, CVE-2014-6407 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123],{"Operator":28,"Negate":28,"Nodes":124},[125],{"Operator":126,"Negate":32,"CPEMatch":127},"OR",[128,131,133],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":129,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":130},"88D0BED4-4F42-4E8C-BC28-86F819849653","1.3.1",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":132,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"03CB78FA-6179-4D06-BB86-9AEF990C688F",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":134,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"53F3F7E1-D507-4C6B-9817-8B792F412A28",[],[],{"lastModified":11,"cacheTime":138,"version":22},1793201489689,{"score":140,"band":141,"action":142,"scoredAt":143},47,"Medium","Plan remediation","2026-07-01T10:19:17.067237+00:00"]