Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-2989

Опубликовано: 13 сент. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.1

Описание

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/jammy

released

3.4.4+ds1-1ubuntu1.22.04.2
esm-apps/noble

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

released

3.4.4+ds1-1ubuntu1.22.04.2
kinetic

ignored

end of life, was needs-triage
lunar

ignored

end of life, was needs-triage
mantic

ignored

end of life, was needs-triage

Показывать по

EPSS

Процентиль: 13%
0.00044
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 3.6
redhat
больше 3 лет назад

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 7.1
nvd
больше 3 лет назад

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 7.1
msrc
больше 3 лет назад

Описание отсутствует

CVSS3: 7.1
debian
больше 3 лет назад

An incorrect handling of the supplementary groups in the Podman contai ...

suse-cvrf
больше 3 лет назад

Security update for podman

EPSS

Процентиль: 13%
0.00044
Низкий

7.1 High

CVSS3

Уязвимость CVE-2022-2989