PT-2021-21883
CVE-2021-37841
·
تاريخ النشر
2021-08-12
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Docker Desktop versions prior to 3.6.0
Description:
The issue is related to incorrect access control in Docker Desktop. If a low-privileged account can access the server running the Windows containers, it can lead to a full container compromise in both process isolation and Hyper-V isolation modes. This allows an attacker with low privilege to read, write, and possibly even execute code inside the containers.
Recommendations:
For Docker Desktop versions prior to 3.6.0, update to version 3.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the server running the Windows containers to prevent low-privileged accounts from accessing it.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾