CVE-2021-1645
MEDIUMWindows 10 and Windows Server 2016/2019 - Information Disclosure via Docker API
Title source: llmDescription
Windows Docker Information Disclosure Vulnerability
References (4)
Core 4
Core References
Vendor Advisory vendor-advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1645
Mailing List
http://seclists.org/fulldisclosure/2021/Mar/33
Exploit, Third Party Advisory
http://packetstormsecurity.com/files/161816/Microsoft-Windows-Containers-DP-API-Cryptography-Flaw.html
Scores
CVSS v3
5.0
EPSS
0.0727
EPSS Percentile
93.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
Status
published
Products (10)
microsoft/windows_10
20h2
microsoft/windows_10
1607
microsoft/windows_10
1809
microsoft/windows_10
1909
microsoft/windows_10
2004
microsoft/windows_server_2016
microsoft/windows_server_2016
20h2
microsoft/windows_server_2016
1909
microsoft/windows_server_2016
2004
microsoft/windows_server_2019
Published
Jan 12, 2021
Tracked Since
Feb 18, 2026