Main
Vulnerability Database
Exploits
ID:3468 - Exploit for Permissions, Privileges, and Access Controls in Docker Desktop - CVE-2020-10665
ID:3468 - Exploit for Permissions, Privileges, and Access Controls in Docker Desktop - CVE-2020-10665
Published: July 15, 2020
Vulnerability identifier: #VU28297
Vulnerability risk: Low
CVE-ID: CVE-2020-10665
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Docker Desktop
Docker Desktop
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to application mishandles the collection of diagnostics with Administrator privileges,
leading to arbitrary DACL permissions overwrites and arbitrary file
writes.A local user can execute arbitrary code with NT AUTHORITY\SYSTEM privileges.
Remediation
Install updates from vendor's website.