Docker Desktop installer on Windows in versions prior to 4.6.0 allows an malicious user to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log files to a location not writable by non-administrator users.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
docker docker_desktop |
Vulmon