Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-37841

Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows containers, it can lead to a full container compromise in both process isolation and Hyper-V isolation modes. This security issue leads an attacker with low privilege to read, write and possibly even execute code inside the containers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.1%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
Products affected by CVE-2021-37841
  • Docker » Desktop » Version: N/A
    cpe:2.3:a:docker:desktop:-
  • Docker » Desktop » Version: 2.1.0.1
    cpe:2.3:a:docker:desktop:2.1.0.1
  • Docker » Desktop » Version: 2.1.0.2
    cpe:2.3:a:docker:desktop:2.1.0.2
  • Docker » Desktop » Version: 2.1.0.3
    cpe:2.3:a:docker:desktop:2.1.0.3
  • Docker » Desktop » Version: 2.1.0.4
    cpe:2.3:a:docker:desktop:2.1.0.4
  • Docker » Desktop » Version: 2.1.0.5
    cpe:2.3:a:docker:desktop:2.1.0.5
  • Docker » Desktop » Version: 2.2.0.0
    cpe:2.3:a:docker:desktop:2.2.0.0
  • Docker » Desktop » Version: 2.2.0.3
    cpe:2.3:a:docker:desktop:2.2.0.3
  • Docker » Desktop » Version: 2.2.0.4
    cpe:2.3:a:docker:desktop:2.2.0.4


Contact Us

Shodan ® - All rights reserved