Security readout for executives and security teams
Plain-English summary
CVE-2020-15360 is a reported privilege escalation issue in Docker Desktop 2.3.0.3 involving com.docker.vmnetd. The source bundle says client verification was missing, which could let a local user gain higher privileges. Evidence is sparse, with no CVSS score, named patch version, or confirmed exploitation in the provided sources.
Executive priority
Prioritize validation on developer workstations and build machines using old Docker Desktop. Business urgency depends on confirmed deployment because the sources do not show exploitation or severity scoring.
Technical view
The CVE record describes com.docker.vmnetd in Docker Desktop 2.3.0.3 as lacking client verification, enabling privilege escalation. The provided affected-product metadata is incomplete, so exposure should be validated against installed Docker Desktop versions and vendor release notes. No exploitability details, CVSS vector, or remediation version are supplied.
Likely exposure
Likely limited to systems running Docker Desktop 2.3.0.3 with the com.docker.vmnetd component. The bundle does not confirm other versions, platforms, or configurations.
Exploitation context
The source bundle does not show CISA KEV listing or active exploitation. It only supports a local privilege escalation concern from missing client verification.
Researcher notes
Do not assume broad Docker impact. The provided record names Docker Desktop 2.3.0.3 and com.docker.vmnetd only. Public evidence is incomplete on affected ranges, fixed versions, and exploitation status.
Mitigation direction
- Inventory Docker Desktop installations and identify version 2.3.0.3.
- Check Docker release notes and vendor guidance for fixed versions.
- Upgrade affected Docker Desktop installations if vendor guidance identifies a fixed release.
- Restrict local access to developer workstations where outdated Docker Desktop is installed.
Validation and detection
- Confirm whether Docker Desktop 2.3.0.3 is installed on endpoints.
- Verify whether com.docker.vmnetd is present on those systems.
- Review endpoint privilege escalation alerts around Docker Desktop hosts.
- Document any uncertainty where product or version evidence is incomplete.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Privilege behavior lookup
The CVE wording references privilege impact, so privilege escalation and authorization behavior review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupContainer behavior lookup
The affected technology mentions containers, so container-specific ATT&CK technique review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2020-15360 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://docs.docker.com/docker-for-windows/release-notes/CVE reference · x_refsource_MISC
- https://whitehatck01.blogspot.com/2020/06/dockers-latest-version-of-privilege.htmlCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.