Lucene search
PRIOn knowledge basePRION:CVE-2019-10214HistoryNov 25, 2019 - 11:15 a.m.
Authorization
2019-11-2511:15:00
PRIOn knowledge base
www.prio-n.com
16
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.
| CPE | Name | Operator | Version |
|---|---|---|---|
| leap | eq | 15.1 | |
| enterprise_linux | eq | 8.0 | |
| openshift_container_platform | eq | 4.1 |
Related
openvas
openvas
openSUSE: Security Advisory for skopeo (openSUSE-SU-2019:2138-1)
2020-01-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0712-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for skopeo (openSUSE-SU-2020:0377-1)
2020-03-26 00:00:00
osv
osv
CVE-2019-10214
2019-11-25 11:15:11
Insufficiently Protected Credentials in github.com/containers/image
2021-04-14 20:04:52
containers/image library Insufficiently Protects Credentials
2022-02-15 01:57:18
suse
suse
Security update for skopeo (important)
2019-09-15 00:00:00
Security update for skopeo (important)
2019-09-24 00:00:00
Security update for buildah (important)
2019-09-15 00:00:00
cvelist
cvelist
CVE-2019-10214
2019-11-25 10:41:15
nessus
nessus
openSUSE Security Update : podman (openSUSE-2019-2143)
2019-09-17 00:00:00
openSUSE Security Update : buildah (openSUSE-2019-2137)
2019-09-16 00:00:00
SUSE SLES15 Security Update : skopeo (SUSE-SU-2019:2340-1)
2019-09-11 00:00:00
veracode
veracode
Information Disclosure
2019-09-24 00:19:31
redhat
redhat
nvd
nvd
CVE-2019-10214
2019-11-25 11:15:11
cve
cve
CVE-2019-10214
2019-11-25 11:15:11
debiancve
debiancve
CVE-2019-10214
2019-11-25 11:15:11
github
github
containers/image library Insufficiently Protects Credentials
2022-02-15 01:57:18
ubuntucve
ubuntucve
CVE-2019-10214
2019-11-25 00:00:00
redhatcve
redhatcve
CVE-2019-10214
2020-01-19 09:45:16
almalinux
almalinux
Important: container-tools:rhel8 security, bug fix, and enhancement update
2019-11-05 17:41:57
Important: container-tools:1.0 security and bug fix update
2019-11-05 17:52:13
oraclelinux
oraclelinux
container-tools:1.0 security and bug fix update
2019-11-14 00:00:00
container-tools:ol8 security, bug fix, and enhancement update
2019-11-14 00:00:00
container-tools:2.0 security update
2021-03-05 00:00:00
rocky
rocky
container-tools:1.0 security and bug fix update
2019-11-05 17:52:13
container-tools:rhel8 security, bug fix, and enhancement update
2019-11-05 17:41:57