An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Service (which runs as SYSTEM), and then impersonate their privileges.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-06-05T13:10:17
Updated: 2024-08-04T11:35:12.463Z
Reserved: 2020-04-02T00:00:00
Link: CVE-2020-11492
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-06-05T14:15:10.607
Modified: 2024-11-21T04:58:00.410
Link: CVE-2020-11492
Redhat
No data.