CVEvulnerability

CVE-2022-2989

7.1 HIGH Published 2022-09-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-842, CWE-863

Description

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

Affected configurations

• podman project podman • redhat openshift container platform 3.11 • redhat openshift container platform 4.0 • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0

Related

Weakness · CWE (2)

  • CWE-842 Placement of User into Incorrect Group weakness
  • CWE-863 Incorrect Authorization weakness

References