7.8Yüksek KEV

CVE-2019-15752Docker Desktop Community Edition Privilege Escalation Vulnerability

docker docker; apache geode Yayım: 2019-08-28 23:24 (7 yıl önce)

Aktif olarak istismar ediliyor — Docker Desktop Community Edition Privilege Escalation Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 03.11.2021 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 03.05.2022.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-15752

Açıklama

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.

Zayıflık türü (CWE): CWE-732

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
apache	geode	1.12.0
docker	docker	< 2.1.0.1

Kaynaklar ve yamalar

https://medium.com/%40morgan.henry.roman/elevation-of-privilege-in-docker-for-windows-2fd8450b478e ExploitThird Party Advisory
http://packetstormsecurity.com/files/157404/Docker-Credential-Wincred.exe-Privilege-Escalation.html ExploitThird Party AdvisoryVDB Entry
[geode-issues] 20200831 [jira] [Created] (GEODE-8471) Dependency security issues in geode-core-1.12 mailing-listMailing List
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-15752 US Government Resource

CPE eşleşmeleri (NVD) (2)

cpe:2.3:a:docker:docker:*:*:*:*:community:*:*:* < 2.1.0.1
cpe:2.3:a:apache:geode:1.12.0:*:*:*:*:*:*:*

CVSS puanı

7.8Yüksek

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Yerel
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekir
Kapsam: Değişmez
Gizlilik: Yüksek
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tüm puanlar (4)

CISA-ADP	CVSS 3.1	7.8Yüksek
nvd	CVSS 3.1	7.8Yüksek
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.8Yüksek
nvd	CVSS 2.0	9.3Yüksek

EPSS (30 günde istismar olasılığı)

48.78%

tüm CVE'lerin %99'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: active
Otomatikleştirilebilir: no
Teknik etki: total

Zaman çizelgesi

Numara ayrıldı2019-08-28
Yayımlandı2019-08-28 23:24
IP-DB'ye ulaştı2026-10-24 23:34
KEV'e eklendi2021-11-03
Son güncelleme2026-06-17 05:21

Numarayı veren (CNA): mitre
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Docker / Moby

7.3Yüksek

CVE-2026-126329 dün

Docker Sandboxes privilege escalation through untrusted state directories

Docker Docker Sandboxes

Docker Sandboxes reuses existing state and configuration directories without verifying their ownership. If sbx or sandboxd is run as root with HOME or, on Linux, XDG_STATE_HOME pointing to an attacker-controlled location, a local unprivileged user can substit…

2.4Düşük

CVE-2026-126330 dün

Docker Sandboxes restores removed automatically assigned port publications

Docker Docker Sandboxes

Docker Sandboxes can silently republish a sandbox service after an operator removes its automatically assigned host-port mapping. The daemon removes the active binding but retains the original publication request, allowing a later port change or sandbox resta…

5.7Orta

CVE-2026-123082 3 gün önce

Docker Desktop logs can expose the Docker Hub access token

Docker Docker Desktop

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker D…

4.5Orta

CVE-2026-121520 10 gün önce

Malicious client could set xattr value outside of BuildKit state directory

Moby BuildKit

In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. name…

6.7Orta

CVE-2026-121522 10 gün önce

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

5.6Orta

CVE-2026-121541 10 gün önce

Bake filesystem path entitlements approval can be skipped in some multi-target builds

Docker Docker Buildx

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some …