Docker Hub flaw let attackers impersonate users, tamper with images
BleepingComputer reported that a flaw in Docker Hub let attackers impersonate users and tamper with images. The headline and excerpt identify Docker Hub, Docker's container image registry, as the affected service, and describe two stated capabilities: impersonating users and tampering with images. The source does not name a CVE identifier, a package or Docker version, a researcher or vendor advisory, a discovery date, or a disclosure timeline. It also does not state how many accounts or images were affected, what authentication or permission mechanism was involved, or whether the issue has been patched. Because the provided text is limited to the title and a short excerpt, the digest stays with those claims. No remediation guidance, exploitability conditions, or deployment patterns are described in the source, and none are added here. The report is framed as a security issue affecting a widely used container registry, where the stated impact is unauthorized user impersonation and modification of images.
The source states attackers could impersonate Docker Hub users and tamper with images, which are the artifacts developers pull and run.