Lucene search
+L

3250 matches found

CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•16 views

Podman Access Control Error Vulnerability

An access control error vulnerability exists in Podman that stems from not properly checking the file permissions of a non-root user running in a privileged container. A low-privileged user in the container could abuse this vulnerability to access any other file in the container...

7CVSS6.9AI score0.00261EPSS
SaveExploits0References8
OSV
OSV
•added 2021/02/02 7:15 p.m.•36 views

CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS6.8AI score
SaveExploits0References4
OSV
OSV
•added 2021/02/02 7:15 p.m.•11 views

DEBIAN-CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS7.1AI score0.01145EPSS
SaveExploits1References1
OSV
OSV
•added 2021/02/02 7:15 p.m.•17 views

AZL-7329 CVE-2021-20199 affecting package podman for versions less than 4.1.1-1

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS6.9AI score0.01145EPSS
SaveExploits1References1
NVD
NVD
•added 2021/02/02 7:15 p.m.•27 views

CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS0.01145EPSS
SaveExploits1References4
Prion
Prion
•added 2021/02/02 7:15 p.m.•30 views

Authentication flaw

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

4.3CVSS5.8AI score0.01145EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2021/02/02 7:15 p.m.•47 views

CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS6.9AI score0.01145EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/02/02 7:15 p.m.•12 views

CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS6.9AI score0.01145EPSS
SaveExploits1References5
OSV
OSV
•added 2021/02/02 7:15 p.m.•17 views

UBUNTU-CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS6.9AI score0.01145EPSS
SaveExploits1References4
CVE
CVE
•added 2021/02/02 6:12 p.m.•288 views

CVE-2021-20199

CVE-2021-20199 affects Podman (rootless containers) starting from 1.8.0, where remote traffic to rootless containers is seen as originating from 127.0.0.1. This can allow containerized apps that trust localhost connections to be exposed to untrusted remote traffic without authentication. Connecte...

5.9CVSS6.3AI score0.01145EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/02/02 6:12 p.m.•44 views

CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

6.7AI score0.01145EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2021/02/02 6:12 p.m.•79 views

CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS6.4AI score0.01145EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/02/02 6:12 p.m.•52 views

CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS6.1AI score0.01145EPSS
SaveExploits1
Mend
Mend
•added 2021/02/02 6:12 p.m.•1 views

CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

8.2CVSS0.01145EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•14 views

Podman onwards Access Control Error Vulnerability

Podman is an engine for developing, managing and running OCI containers on Linux systems. A security vulnerability exists in Podman 1.8.0 onwards, which originates from containerized applications that by default trust the localhost 127.0.01 connection and do not require authentication...

5.9CVSS6.9AI score0.01145EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/02 12:00 a.m.•7 views

CVE-2021-20199: Origin Validation Error

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

5.9CVSS7.9AI score0.01145EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2021/02/01 11:15 a.m.•44 views

CVE-2021-20199

A flaw was found in podman. Rootless containers receive all traffic with a source IP address of 127.0.0.1 including from remote hosts which impact containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. The highest threat from this...

5.9CVSS2.1AI score0.01145EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2021/02/01 12:00 a.m.•75 views

CentOS 8 : container-tools:rhel8 (CESA-2020:1650)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1650 advisory. - runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation CVE-2019-19921 - containers/image: Container...

7CVSS6.6AI score0.01842EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/01 12:00 a.m.•0 views

PT-2021-13835

Name of the Vulnerable Software and Affected Versions: Podman versions 1.8.0 through 3.0.0 Description: The issue impacts containerized applications that trust localhost connections by default and do not require authentication. Rootless containers run with Podman receive all traffic with a source...

7.5CVSS0.01145EPSS
SaveExploits1References115
OSV
OSV
•added 2020/12/15 4:03 p.m.•21 views

ALBA-2020:5497 container-tools:2.0 bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fixes: update description and summary for container-tools module for 8.3.0 BZ1898251...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder