Design/Logic Flaw

HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 edge and before 18.06.0-ce-win72 stable deserialized requests over the \.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users"...

PT-2018-13063

Name of the Vulnerable Software and Affected Versions Docker for Windows versions prior to 18.06.0-ce-rc3-win68 edge and prior to 18.06.0-ce-win72 stable Description The issue allows a malicious user in the "docker-users" group to escalate to administrator privileges by deserializing requests ove...

CVE-2018-15514: Deserialization of Untrusted Data

HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 edge and before 18.06.0-ce-win72 stable deserialized requests over the \.\pipe\dockerBackend named pipe without verifying the validity of the deserialized .NET objects. This would allow a malicious user in the "docker-users"...