Docker (Desktop Community Edition) Data Breach

Docker (Desktop Community Edition) experienced a data breach that was reported on November 3, 2021. Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\

Key Facts

Organization
Docker (Desktop Community Edition)
Date Reported
November 3, 2021
Incident Type
malware
Industry
Technology
Severity Score
5/10
Confidence Level
high
Tags
malware

Source

View original source - External link to primary source documentation

Understanding malware Incidents

Malware infections can lead to data theft, system compromise, and persistent access for attackers. Endpoint protection and network monitoring help detect and prevent infections.