Описание
A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| jammy | DNE | |
| noble | DNE | |
| oracular | DNE | |
| plucky | needs-triage | |
| upstream | needs-triage |
Показывать по
EPSS
8.3 High
CVSS3
Связанные уязвимости
A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.
A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.
A flaw was found in Podman. The podman machine init command fails to v ...
Podman Improper Certificate Validation; machine missing TLS verification
ELSA-2025-10551: container-tools:rhel8 security update (IMPORTANT)
EPSS
8.3 High
CVSS3