Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Docker Desktop ausnutzen, um Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.
Product
Docker Desktop ist ein GUI-Tool rund um die Open-Source-Docker-Engine, mit dem sich containerisierte Anwendungen auf einem lokalen Rechner erstellen, teilen und ausführen lassen.
Vulnerabilities 2
-
Medium 5.2
Exposure in Docker Desktop logs of environment variables configured for running containers
Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could …
-
Medium 4.3
Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being appli…
Revision history
-
#1
Initiale Fassung
References
-
NIST Vulnerability Database vom 2025-04-29
https://nvd.nist.gov/vuln/detail/CVE-2025-3911
-
NIST Vulnerability Database vom 2025-04-29
https://nvd.nist.gov/vuln/detail/CVE-2025-4095