Arbitrary File Movement Vulnerability in Docker Desktop on Windows

CVE-2022-25365 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23774.

Learn more about our Cis Benchmark Audit For Desktop Software.