Vulnerabilidades do Docker Docker

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Docker Docker: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:docker:docker

CVE-2019-15752 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-732 28/08/2019

Docker Desktop Community Edition Privilege Escalation Vulnerability

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.