CVE-2022-2739

2022-09-0120:51:02

CWE-200

redhat

www.cve.org

podman

red hat

linux

security

cve-2022-2739

rhsa-2022:2190

rhsa-2020:5056

information disclosure

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive information stored in environment variables.

CNA Affected

[
  {
    "product": "podman",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "podman 1.6.4-32.el7_9"
      }
    ]
  }
]