VYPR
← All advisories
High severity7.1NVD Advisory· Published Sep 25, 2023· Updated Jun 17, 2026

CVE-2023-5165

CVE-2023-5165

Description

Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop. The affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges.

This issue has been fixed in Docker Desktop 4.23.0.

Affected Docker Desktop versions: from 4.13.0 before 4.23.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Docker/Desktop3 versions
    cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:*range: >=4.13.0,<4.23.0
    • (no CPE)range: from 4.13.0 before 4.23.0
    • (no CPE)range: 4.13.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.