Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.
References
Link | Resource |
---|---|
https://docs.docker.com/desktop/release-notes/#4120 | Release Notes Vendor Advisory |
Configurations
History
25 Sep 2023, 18:15
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:* | |
First Time |
Docker docker Desktop
Docker |
|
CWE | NVD-CWE-Other | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
References | (MISC) https://docs.docker.com/desktop/release-notes/#4120 - Release Notes, Vendor Advisory |
25 Sep 2023, 16:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-25 16:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-0627
Mitre link : CVE-2023-0627
CVE.ORG link : CVE-2023-0627
JSON object : View
Products Affected
docker
- docker_desktop
CWE