5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
6 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
49.4%
An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
CPE | Name | Operator | Version |
---|---|---|---|
github.com/containers/podman/v2 | lt | 2.0.5 |
bugzilla.redhat.com/show_bug.cgi?id=1874268
github.com/containers/podman
github.com/containers/podman/commit/a7e864e6e7de894d4edde4fff00e53dc6a0b5074
lists.fedoraproject.org/archives/list/[email protected]/message/G6BPCZX4ASKNONL3MSCK564IVXNYSKLP
lists.fedoraproject.org/archives/list/[email protected]/message/Y74V7HGQBNLT6XECCSNZNFZIB7G7XSAR
lists.fedoraproject.org/archives/list/[email protected]/message/Z4Y2FSGQWP4AFT5AZ6UBN6RKHVXUBRFV
nvd.nist.gov/vuln/detail/CVE-2020-14370
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
6 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
49.4%