Junglewise Threat Intelligence

CVE-2019-15752: Docker Desktop Community Edition Privilege Escalation Vulnerability

CVE-2019-15752 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2021-11-03

Technologies: Docker Desktop Community Edition. Vendors: Docker.

Executive brief

Docker Desktop Community Edition before 2.1.0.1 allows local users to escalate privileges by placing a malicious docker-credential-wincred.exe file in a specific ProgramData directory. The vulnerability is triggered when an administrative or service user authenticates, restarts Docker, or executes a login command.

Affected products

  • Docker Docker Desktop Community Edition before 2.1.0.1

Timeline

  • 2021-11-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2021-11-03: disclosed