Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

A vulnerability in Docker Hub allowed one user to push, pull, or delete images belonging to another user. The issue was related to the feature that converts a personal account into an organization. Docker resolved the flaw on September 30 and has found no evidence of exploitation. The company disclosed the fix in a security advisory on October 12. The vulnerability had existed for approximately two years before being addressed.