docker docker-desktop CVE-2021-45449 is a vulnerability in Docker Desktop
Published on January 12, 2022

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the users local files.

NVD


Products Associated with CVE-2021-45449

Want to know whenever a new CVE is published for Docker Desktop? stack.watch will email you.

 

Exploit Probability

EPSS
0.05%
Percentile
16.50%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.