CVE-2019-15752
Last modified
CVE-2019-15752 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.. CISA has confirmed active exploitation in the wild. EPSS estimates a 29.63% chance of exploitation in the next 30 days.
Description
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Docker | Docker | < 2.1.0.1 |
| Apache | Geode | 1.12.0 |
References
- http://packetstormsecurity.com/files/157404/Docker-Credential-Wincred.exe-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
- https://medium.com/%40morgan.henry.roman/elevation-of-privilege-in-docker-for-windows-2fd8450b478eExploit, Third Party Advisory
- http://packetstormsecurity.com/files/157404/Docker-Credential-Wincred.exe-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
- https://medium.com/%40morgan.henry.roman/elevation-of-privilege-in-docker-for-windows-2fd8450b478eExploit, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-15752US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2019-15752?
How severe is CVE-2019-15752?
How do I fix CVE-2019-15752?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-15747SITOS six Build v6.2.1 allows a user with the user role of S…8.8
- CVE-2019-15748SITOS six Build v6.2.1 permits unauthorised users to upload …9.8
- CVE-2019-15749SITOS six Build v6.2.1 allows a user to change their passwor…6.5
- CVE-2019-1575Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS …8.8
- CVE-2019-15750A Cross-Site Scripting (XSS) vulnerability in the blog funct…6.1
- CVE-2019-15751An unrestricted file upload vulnerability in SITOS six Build…9.8
- CVE-2019-15753In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard…
- CVE-2019-15757libMirage 3.2.2 in CDemu has a NULL pointer dereference in t…
- CVE-2019-15758An issue was discovered in Binaryen 1.38.32. Missing validat…6.5
- CVE-2019-15759An issue was discovered in Binaryen 1.38.32. Two visitors in…6.5
- CVE-2019-1576Command injection in PAN-0S 9.0.2 and earlier may allow an a…8.8
- CVE-2019-15766The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for …8.8
Are you affected by CVE-2019-15752?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST