Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-34292
HistoryApr 27, 2023 - 8:15 p.m.

Code injection

2023-04-2720:15:00
PRIOn knowledge base
www.prio-n.com
5
docker desktop
windows
code injection
symlink attack
api
cve-2022-31647

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 API by controlling the DataFolder parameter for DockerDesktop.vhdx, a similar issue to CVE-2022-31647.

CPENameOperatorVersion
desktoplt4.6.0

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for PRION:CVE-2022-34292