admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-11-30 18:56:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-37326.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

861 B
Raw Blame History

CVE-2022-37326

Description

Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation.

POC

Reference

Github

No PoCs found on GitHub currently.