CVE-2019-15752: Docker Desktop Community Edition Privilege Escalation Vulnerability
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.
Other sources
Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Docker Desktop Community Editionto a version that resolves this vulnerability.Fixed in 2.1.0.1
Event History
Frequently Asked Questions
What is the vulnerability ID for this Docker Desktop Community Edition Privilege Escalation vulnerability?
The vulnerability ID for this Docker Desktop Community Edition Privilege Escalation vulnerability is CVE-2019-15752.
What is the severity of CVE-2019-15752?
CVE-2019-15752 has a severity score of 7.8, which is considered critical.
How can local users exploit this vulnerability?
Local users can gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker Desktop, or wait for a system restart.
Which versions of Docker Desktop Community Edition are affected?
Versions before 2.1.0.1 of Docker Desktop Community Edition are affected by this privilege escalation vulnerability.
How do I fix this vulnerability?
To fix this vulnerability, update Docker Desktop Community Edition to version 2.1.0.1 or later.