PT-2022-17991 · Docker · Docker Desktop

Published 2022-03-25 · Updated 2025-01-31 · CVE-2022-26659

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Docker Desktop versions prior to 4.6.0

Description The issue allows an attacker to overwrite administrator-writable files by creating a symlink where the installer writes its log file. This can be exploited when the Docker Desktop installer is run on Windows. The estimated number of potentially affected devices is not specified.

Recommendations For versions prior to 4.6.0, update to version 4.6.0 or later to resolve the issue, as the new version writes log files to a location not writable by non-administrator users.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2022-26659

Affected Products

Docker Desktop

References · 9

• 🔥 https://github.com/hmnthabit/Advisories/blob/master/CVE-2022-26659.md · Exploit
• https://docs.docker.com/desktop/windows/release-notes · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-26659 · Vendor Advisory
• https://docs.docker.com/docker-for-windows/release-notes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26659 · Security Note
• https://t.me/cibsecurity/63017 · Telegram Post
• https://t.me/cvenotify/109539 · Telegram Post
• https://t.me/cibsecurity/39579 · Telegram Post
• https://t.me/cvenotify/49237 · Telegram Post