View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2014-3499 severity moderate: SUSE including 43 source package names (docker, docker-0.11.1-22.el7, …), 129 product×package rows across 44 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (44 product lines)): Fixed 68, Known Not Affected 61.
Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.