Symlink Attack Vulnerability in Docker Desktop for Windows
CVE-2022-34292

7.1HIGH

Key Information:

Vendor

Docker

Status
Desktop
Vendor
CVE Published:
27 April 2023

What is CVE-2022-34292?

Docker Desktop for Windows versions before 4.6.0 are affected by a vulnerability that permits attackers to exploit symlink attacks through the hyperv/create dockerBackendV2 API. By manipulating the DataFolder parameter pertaining to DockerDesktop.vhdx, a malicious actor can overwrite any file on the host system, potentially compromising sensitive data and system integrity. This issue is reminiscent of similar vulnerabilities identified previously.

References

https://docs.docker.com/desktop/release-notes/#docker-des...
https://www.cyberark.com/resources/threat-research-blog/b...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2022-34292 : Symlink Attack Vulnerability in Docker Desktop for Windows