virus logo FortiClient Vulnerability

Docker Desktop CVE-2023-0628 Command Injection Vulnerability

description-logoDescription

Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.

affected-products-logoAffected Applications

Docker Desktop

CVE References

CVE-2023-0628

Other References

https://docs.docker.com/desktop/release-notes/#4170
ID 4885
Created Mar 21, 2023
Description
Updated		 Nov 09, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Docker
Patch manual
Application Docker Desktop