7.1
Élevée
CVE-2022-2989 An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information…
Description
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Podman | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- www.benthamsgaze.org www.benthamsgaze.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Podman
Les 12 CVE de Podman →
CVE-2023-0778
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman
6.8
Moyenne
CVE-2022-4122
A vulnerability was found in buildah
5.3
Moyenne
CVE-2022-4123
A flaw was found in Buildah
3.3
Faible
CVE-2022-2739
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an…
Non notée