In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.
References
Link | Resource |
---|---|
https://docs.docker.com/desktop/release-notes/#4120 | Release Notes Vendor Advisory |
Configurations
History
25 Sep 2023, 18:32
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-88 | |
First Time |
Docker docker Desktop
Docker |
|
CPE | cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
References | (MISC) https://docs.docker.com/desktop/release-notes/#4120 - Release Notes, Vendor Advisory |
25 Sep 2023, 16:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-25 16:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-0633
Mitre link : CVE-2023-0633
CVE.ORG link : CVE-2023-0633
JSON object : View
Products Affected
docker
- docker_desktop
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')