Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli
Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-15558US | high8.0 | — | ||
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this dire… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://docs.docker.com/desktop/release-notesWEB
- https://github.com/docker/cli/commit/13759330b1f7e7cb0d67047ea42c5482548ba7faFIX
- https://github.com/docker/cli/pull/6713FIX
- https://github.com/docker/cli/security/advisories/GHSA-p436-gjf2-799pADVISORY
- https://github.com/docker/compose/pull/12300FIX
- https://www.zerodayinitiative.com/advisories/ZDI-CAN-28304WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan