CVE-2024-41110 Docker Security Checker This tool is designed to check multiple hosts for vulnerabilities related to CVE-2024-41110 in Docker installations. It specifically looks for vulnerable Docker versions and the use of AuthZ plugins, which can potentially lead to security issues. Features Checks multiple hosts in parallel for efficient scanning Detects vulnerable Docker versions Identifies usage of AuthZ plugins Generates a comprehensive summary report Provides a remediation plan for affected hosts Supports both password-based and key-based SSH authentication Requirements Python 3.6 or higher Fabric library (pip install fabric) Installation Clone this repository: git clone https://github.com/vvpoglazov/cve-2024-41110-checker.git cd cve-2024-41110-checker Install the required Python library: pip install fabric Usage Run the script with the following command: python cve_2024_41110_checker.py <username> <hosts_file> <output_directory> [-k <key_file>] <username>: SSH username for connecting to the hosts <hosts_file>: Path to a file containing a list of hostnames or IP addresses (one per line) <output_directory>: Directory where the script will store individual host reports and the summary report -k <key_file>: (Optional) Path to SSH private key file for authentication Examples: Using password-based authentication: python cve_2024_41110_checker.py admin hosts.txt ./reports Using key-based authentication: python cve_2024_41110_checker.py admin hosts.txt…Read More
References
Back to Main