CVE-2022-25365

Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files

High · published February 19, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23774.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2022-02-19T01:56Z
EPSS history
Timeline
  • 19 FEB 01:56Z
    Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files
    cvelistv5