Vulnerability · Published Oct 4, 2021 · Assigned by GitHub_M

CVE-2021-41092Docker CLI leaks private registry credentials to registry-1.docker.io

Medium 5.4

In plain English

A medium-severity information exposure in cli from docker. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)1.7%top 23.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Alpine:v3.20	docker	20.10.9-r0	ALPINE-CVE-2021-41092
Alpine:v3.21	docker	20.10.9-r0	ALPINE-CVE-2021-41092
Alpine:v3.22	docker	20.10.9-r0	ALPINE-CVE-2021-41092
Alpine:v3.23	docker	20.10.9-r0	ALPINE-CVE-2021-41092
Alpine:v3.24	docker	20.10.9-r0	ALPINE-CVE-2021-41092
Debian:12	docker.io	20.10.10+dfsg1-1	DEBIAN-CVE-2021-41092
Debian:13	docker.io	20.10.10+dfsg1-1	DEBIAN-CVE-2021-41092
Debian:14	docker.io	20.10.10+dfsg1-1	DEBIAN-CVE-2021-41092
Go	github.com/docker/cli	20.10.9	GHSA-99pg-grm5-qq3v
Go	github.com/docker/cli	20.10.9+incompatible	GO-2024-2912
Ubuntu:22.04:LTS	docker.io	20.10.7-0ubuntu7	UBUNTU-CVE-2021-41092

Affected products (as reported)

Vendor	Product	Versions
docker	cli	< 20.10.9

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N

References

https://github.com/docker/cli/security/advisories/GHSA-99pg-grm5-qq3v x_refsource_CONFIRM
https://github.com/docker/cli/commit/893e52cf4ba4b048d72e99748e0f86b2767c6c6b x_refsource_MISC
FEDORA-2021-df975338d4 vendor-advisory, x_refsource_FEDORA
FEDORA-2021-b5a9a481a2 vendor-advisory, x_refsource_FEDORA
https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf x_refsource_CONFIRM