Local root execution via world-writable Docker repository

Incorrect permissions in Juniper Networks Junos OS Evolved allow local users to stage malicious files for later root execution. A world-writable Docker repository lets a low-privileged account copy files into an existing container that an administrator later starts. The chain requires Docker to be configured and running, which is not the default, and administrator interaction executes the injected files as root.