CVE-2017-20198

This Metasploit module exploits a vulnerability in DC/OS Marathon UI to create a Docker container with host filesystem access, allowing arbitrary file creation/modification as root via a cron job. It leverages Docker volume mounting to achieve privilege escalation on the host system.

This Metasploit module exploits a vulnerability in DC/OS Marathon UI to create a Docker container with host filesystem access, allowing an attacker to write a cron job for persistent remote code execution. It leverages Docker volume mounting to gain root-level file system manipulation on the host.