CVE-2022-26659
published 2022-03-25CVE-2022-26659: Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of…
PriorityP430high7.1CVSS 3.1
AVLACLPRLUINSUCNIHAH
EPSS
0.43%
34.1th percentile
Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log files to a location not writable by non-administrator users.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| docker | desktop | < 4.6.0 | 4.6.0 |
| docker | docker_desktop | < 4.6.0 | 4.6.0 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
nvdv2.03.6LOWAV:L/AC:L/Au:N/C:N/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hq97-x836-5mc4: Docker Desktop before 4
ghsa_unreviewed·2023-04-27·CVSS 7.1
CVE-2022-31647 [HIGH] CWE-59 GHSA-hq97-x836-5mc4: Docker Desktop before 4
Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different vulnerability than CVE-2022-26659.
GHSA
GHSA-grp6-p35v-pgfx: Docker Desktop installer on Windows in versions before 4
ghsa_unreviewed·2022-03-26
CVE-2022-26659 [HIGH] CWE-59 GHSA-grp6-p35v-pgfx: Docker Desktop installer on Windows in versions before 4
Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log files to a location not writable by non-administrator users.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://docs.docker.com/desktop/windows/release-notes/https://docs.docker.com/docker-for-windows/release-notes/https://github.com/hmnthabit/Advisories/blob/master/CVE-2022-26659.mdhttps://docs.docker.com/desktop/windows/release-notes/https://docs.docker.com/docker-for-windows/release-notes/https://github.com/hmnthabit/Advisories/blob/master/CVE-2022-26659.md
2022-03-25
Published