CVE-2021-45449: Medium severity docker desktop vulnerability

Published Jan 12, 2022

Updated

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files.

Affected Software

2 affected components

Docker Docker Desktop=4.3.0

Docker Docker Desktop=4.3.1

Event History

Jan 12, 2022

CVE Published

via MITRE·07:29 PM

Data Sourced

via MITRE·07:29 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this bug in Docker Desktop?

The vulnerability ID for this bug in Docker Desktop is CVE-2021-45449.

What is the severity level of the Docker Desktop bug with vulnerability ID CVE-2021-45449?

The severity level of the Docker Desktop bug with vulnerability ID CVE-2021-45449 is medium.

Which versions of Docker Desktop are affected by CVE-2021-45449?

Docker Desktop versions 4.3.0 and 4.3.1 are affected by CVE-2021-45449.

What is the impact of CVE-2021-45449?

CVE-2021-45449 may log sensitive information (access token or password) on the user's machine during login.

How can I fix the Docker Desktop bug with vulnerability ID CVE-2021-45449?

To fix the Docker Desktop bug with vulnerability ID CVE-2021-45449, users should upgrade to a version higher than 4.3.1.