CVE-2019-15752

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.

Score

CVSS 3.1 7.8 High

Status

Analyzed - cve@mitre.org

Published

2019-08-28

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2021-11-03, action due 2022-05-03: Apply updates per vendor instructions.

Weaknesses

CWE-732

Affected products

• Geode (Apache)
• Docker (Docker)

References

• http://packetstormsecurity.com/files/157404/Docker-Credential-Wincred.exe-Privilege-Escalation.html
• https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache…
• https://medium.com/%40morgan.henry.roman/elevation-of-privilege-in-docker-for-windows-2fd8450b478e
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-15752