Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Libpod Project Clear all filters
TI-2019-07534 CVE-2019-10214 · GHSA-85p9-j7c9-v4gr

Insufficiently protected credentials in containers/image

Priority LOW 30

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container regi…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01591 Published 2019-11-25 Partial fix · 3.0.0 CWE-522
TI-2019-07473 CVE-2019-10152 · GHSA-rh5f-2w6r-q7vj

Path traversal in podman

Priority LOW 32

A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers.

CVSS 3.1HIGH 7.2 Local Low privileges User interaction EPSS 0.00468 Published 2019-07-30 Fixed in 1.4.0 CWE-22
TI-2018-07670 CVE-2018-10856 · GHSA-wp7w-vx86-vj9h

Incorrect permission assignment in [UNKNOWN] podman

Priority MEDIUM 40

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00878 Published 2018-07-02 Fixed in 0.6.1 CWE-250