{"id":"CVE-2021-45449","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-45449","generatedAt":"2026-10-27T21:48:38.214Z","title":"Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login.","description":"Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files.","published":"2022-01-12T20:15:09.000Z","lastModified":"2026-06-17T04:13:23.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-532"],"affected":["docker/docker desktop"],"epss":{"score":0.00428,"percentile":0.36849,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://docs.docker.com/desktop/windows/release-notes/","tags":["Release Notes","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://docs.docker.com/desktop/windows/release-notes/","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-45449","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}