Not rated
CVE-2020-14370 An information disclosure vulnerability was found in containers/podman in versions before 2.0.5
Description
An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Podman | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2020-76fcd0ba34 lists.fedoraproject.org
- FEDORA-2020-7b6058fec9 lists.fedoraproject.org
- FEDORA-2020-3a4b8fca5e lists.fedoraproject.org
Timeline
- Published
- Last modified
Other CVEs of Podman
The 12 CVEs of Podman →
CVE-2023-0778
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman
6.8
Medium
CVE-2022-4122
A vulnerability was found in buildah
5.3
Medium
CVE-2022-4123
A flaw was found in Buildah
3.3
Low
CVE-2022-2989
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information…
7.1
High