Docker-Credential-Wincred.exe Privilege Escalation

Posted on 27 April 2020

This Metasploit module exploit leverages a vulnerability in Docker Desktop Community Edition versions prior to 2.1.0.1 where an attacker can write a payload to a lower-privileged area to be executed automatically by the docker user at login.