Non notée
CVE-2020-14370 An information disclosure vulnerability was found in containers/podman in versions before 2.0.5
Description
An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Podman | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2020-76fcd0ba34 lists.fedoraproject.org
- FEDORA-2020-7b6058fec9 lists.fedoraproject.org
- FEDORA-2020-3a4b8fca5e lists.fedoraproject.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Podman
Les 12 CVE de Podman →
CVE-2023-0778
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman
6.8
Moyenne
CVE-2022-4122
A vulnerability was found in buildah
5.3
Moyenne
CVE-2022-4123
A flaw was found in Buildah
3.3
Faible
CVE-2022-2989
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information…
7.1
Élevée