Information Disclosure

2022-09-1606:34:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

podman

vulnerability

information disclosure

containers

software

improper handling

supplementary groups

attacker access

arbitrary codes

0.0005 Low

EPSS

Percentile

17.8%

JSON

github.com/containers/podman is vulnerable to Information Disclosure. The vulnerability exists in multiple functions due to improper handling of the supplementary groups in the Podman container engine which allows an attacker to gain access to containers and execute arbitrary codes.

CPENameOperatorVersion
github.com/containers/podmanlev4.2.0
podmaneq4.2.1-r0
podmaneq1.8.2-r0
podmaneq4.0.0-r0
podmaneq3.4.1-r0
podmaneq3.4.4-r1
podmaneq3.3.1-r0
podmaneq4.1.1-r1
podmaneq1.8.1-r0
podmaneq3.4.2-r0

Name	Operator	Version
github.com/containers/podman	le	v4.2.0
podman	eq	4.2.1-r0
podman	eq	1.8.2-r0
podman	eq	4.0.0-r0
podman	eq	3.4.1-r0
podman	eq	3.4.4-r1
podman	eq	3.3.1-r0
podman	eq	4.1.1-r1
podman	eq	1.8.1-r0
podman	eq	3.4.2-r0