PT-2022-17243 · Docker · Docker Desktop +1

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.5.1 Description: The issue allows attackers to move arbitrary files due to an incomplete fix for a previous problem. Recommendations: For versions prior to 4.5.1, update to version 4.5.1 or later to resolve...

CVE-2022-23774

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

CVE-2022-23774

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

CVE-2022-23774

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

Code injection

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

CVE-2022-23774

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

Docker Desktop 安全漏洞

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

PT-2022-16260 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.4.4 Description: The issue allows attackers to move arbitrary files, potentially leading to a local privilege escalation. Additionally, it may cause a denial-of-service due to link following. Recommendations...

CVE-2022-23774: Undefined Security Weakness

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

CVE-2021-45449

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information access token or password on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would...

CVE-2021-45449

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information access token or password on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would...

CVE-2021-45449

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information access token or password on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would...

Information disclosure

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information access token or password on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would...

CVE-2021-45449

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information access token or password on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would...

CVE-2021-45449

CVE-2021-45449 affects Docker Desktop versions 4.3.0 and 4.3.1. A bug may log sensitive information (access tokens or passwords) on a user’s machine during login. Exploitation requires local access to the user’s files. The description notes that only users who have logged in on 4.3.0/4.3.1 are af...

PT-2022-12361

Name of the Vulnerable Software and Affected Versions Docker Desktop versions 4.3.0 through 4.3.1 Description The issue is related to a bug that may log sensitive information, such as access tokens or passwords, on the user's machine during the login process. This affects users who have logged in...

CVE-2021-45449: Insertion of Sensitive Information into Log File

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information access token or password on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would...

Docker Desktop for Windows Privilege Escalation

The vulnerability of the Docker Desktop for Windows platform, which is used for developing and delivering container applications, is related to the incorrect assignment of permissions for the file docker-credential-wincred.exe in the %PROGRAMDATA%\DockerDesktop\version-bin directory. Exploiting...

Docker Desktop < 2.1.0.1 Privilege Escalation

The version of Docker Desktop for Windows is prior to 2.1.0.1. Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting f...

VulnCheck KEV: CVE-2019-15752

Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin...