[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feCPX-eKwpW5U2m3zRVbcl1optzya7q-m5cukEbwWNMc":3,"g5a-risk:CVE-2019-15752":164},{"success":4,"data":5,"meta":162},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":27,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":63,"references":64,"referencesCount":87,"weaknesses":88,"weaknessesCount":97,"isActivelyExploited":4,"cisaInfo":98,"otxData":27,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":146,"notableEvents":147},"CVE-2019-15752","What is CVE-2019-15752?","Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\\DockerDesktop\\version-bin\\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.","Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRA...","2019-08-28T21:15:10.88","2025-03-14T17:32:41.493",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,1.8,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":26,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":37,"VectorString":38,"AccessVector":39,"AccessComplexity":40,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":41,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","NETWORK","MEDIUM","COMPLETE",9.3,8.6,10,0.48628,[45,45,45,45,45,45,45],"High",[49,53,58],{"vendor":50,"product":50,"version":51,"criteria":52,"vulnerable":4},"docker","*","cpe:2.3:a:docker:docker:*:*:*:*:community:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":61,"criteria":62,"vulnerable":4},"apache","geode","1.12.0","cpe:2.3:a:apache:geode:1.12.0:*:*:*:*:*:*:*",3,[65,72,77,81,83,85],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F157404\u002FDocker-Credential-Wincred.exe-Privilege-Escalation.html","Packetstormsecurity",[69,70,71],"Exploit","Third Party Advisory","VDB Entry",{"url":73,"source":74,"tags":75},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E","Apache",[76],"Mailing List",{"url":78,"source":79,"tags":80},"https:\u002F\u002Fmedium.com\u002F%40morgan.henry.roman\u002Felevation-of-privilege-in-docker-for-windows-2fd8450b478e","Medium",[69,70],{"url":66,"source":67,"tags":82},[69,70,71],{"url":73,"source":74,"tags":84},[76],{"url":78,"source":79,"tags":86},[69,70],6,[89],{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-732","Incorrect Permission Assignment for Critical Resource","The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.","When a resource is given a permission setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution, or sensitive user data. For example, consider a misconfigured storage account for the cloud that can be read or written by a public or anonymous user.","Draft","Class","Simple",1,{"shortDescription":99,"requiredAction":99,"vulnerabilityName":99,"dateAdded":27},"",[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2019-15752? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-15752, a high severity cyber security vulnerability from 2019. High exploit probability (48.6%). Docker Desktop Community ...","CVE-2019-15752, CVE-2019-15752 vulnerability, CVE-2019-15752 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, docker security, microsoft security, apache security, docker vulnerability, windows vulnerability, geode vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2019-15752",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-15752","Cybersecurity","CVE-2019-15752, CVE-2019-15752 vulnerability, CVE-2019-15752 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127,140],{"Operator":128,"Negate":27,"Nodes":129},"AND",[130,136],{"Operator":131,"Negate":27,"CPEMatch":132},"OR",[133],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":134,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":135,"VersionEndIncluding":27},"FB71A149-B573-410D-AA44-289DDE21E4BF","2.1.0.1",{"Operator":131,"Negate":27,"CPEMatch":137},[138],{"Vulnerable":27,"Criteria":57,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A2572D17-1DE6-457B-99CC-64AFD54487EA",{"Operator":27,"Negate":27,"Nodes":141},[142],{"Operator":131,"Negate":27,"CPEMatch":143},[144],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8DD32C20-8B17-4197-9943-B8293D1C3BED",[],[148,155],{"id":149,"eventType":150,"eventTime":151,"details":152,"label":153,"color":154},"471fe6e5-fb4c-43c5-89ba-eab4bfd86d7e","LOW_EPSS_DELTA","2025-09-03T04:07:49.917845+00:00","Daily EPSS score decreased by 0.162 on 2023-12-30","EPSS Score Decreased","green",{"id":156,"eventType":157,"eventTime":158,"details":159,"label":160,"color":161},"944f7f93-5507-4e07-9024-8f39f852e600","HIGH_EPSS_DELTA","2025-11-22T04:06:24.370287+00:00","Daily EPSS score increased by 0.190 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":163,"version":37},1792367818310,{"score":165,"band":47,"action":166,"scoredAt":167},74,"Emergency patch","2026-10-16T06:46:46.825265+00:00"]