ZeroHour

CVE-2022-2989

PoC ×2
CVSS 3.1
7.1 high
EPSS
<1%p25
Published
()
Modified
Description

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

Vendors
podman projectredhat
Products
podman, openshift container platform, enterprise linux
Weakness
CWE-842, CWE-863
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

In the news

No ingested article mentions this CVE yet.