CVE-2019-15752
HIGH KEVDocker Desktop Community Edition < 2.1.0.1 - Privilege Escalation via Trojan Horse docker-credential-wincred.exe
Title source: llmExploitation Summary
CVE-2019-15752 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021.
EIP tracks 2 public exploits from researchers including Metasploit, Morgan Roman, bwatters-r7, including a Metasploit module exploits/windows/local/docker_credential_wincred.
AI-analyzed exploit summary This Metasploit module exploits CVE-2019-15752, a privilege escalation vulnerability in Docker Desktop for Windows. It writes a malicious payload to a low-privilege directory, which is then executed by the Docker service upon user login, achieving local privilege escalation.
Description
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.
Exploits (2)
This Metasploit module exploits CVE-2019-15752, a privilege escalation vulnerability in Docker Desktop for Windows. It writes a malicious payload to a low-privilege directory, which is then executed by the Docker service upon user login, achieving local privilege escalation.
This Metasploit module exploits CVE-2019-15752, a privilege escalation vulnerability in Docker Desktop for Windows. It writes a malicious payload to a low-privilege directory, which is then executed by the Docker service at login, allowing local privilege escalation.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H