Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-2989

Опубликовано: 13 сент. 2022
Источник: ubuntu
Приоритет: medium
CVSS3: 7.1

Описание

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/jammy

released

3.4.4+ds1-1ubuntu1.22.04.2
esm-apps/noble

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

released

3.4.4+ds1-1ubuntu1.22.04.2
kinetic

ignored

end of life, was needs-triage
lunar

ignored

end of life, was needs-triage
mantic

ignored

end of life, was needs-triage

Показывать по

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 3.6
redhat
почти 3 года назад

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 7.1
nvd
почти 3 года назад

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 7.1
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 7.1
debian
почти 3 года назад

An incorrect handling of the supplementary groups in the Podman contai ...

suse-cvrf
больше 2 лет назад

Security update for podman

7.1 High

CVSS3