CVE-2023-5165CWE-424CWE-862

Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell

High · published September 25, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop. The affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges.

This issue has been fixed in Docker Desktop 4.23.0.

Affected Docker Desktop versions: from 4.13.0 before 4.23.0.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00327 · 24.5th percentile
Weaknesses
CWE-424 · Improper Protection of Alternate Path; CWE-862 · Missing Authorization
Published
2023-09-25T15:29Z
EPSS history
Timeline
  • 25 SEP 15:29Z
    Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell
    cvelistv5