Lucene search
+L

5166 matches found

osv_ghsa
osv_ghsa
•added 2022/09/14 12:00 a.m.•36 views

GHSA-4WJJ-JWC9-2X96 Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.7AI score0.00542EPSS
SaveExploits2References11
Github Security Blog
Github Security Blog
•added 2022/09/14 12:00 a.m.•51 views

Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.7AI score0.00322EPSS
SaveExploits1References11Affected Software2
osv_ghsa
osv_ghsa
•added 2022/09/14 12:00 a.m.•47 views

GHSA-FJM8-M7M6-2FJP Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.7AI score0.00542EPSS
SaveExploits2References8
NVD
NVD
•added 2022/09/13 2:15 p.m.•31 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS0.00349EPSS
SaveExploits1References2
osv_azl
osv_azl
•added 2022/09/13 2:15 p.m.•14 views

AZL-36935 CVE-2022-2990 affecting package buildah for versions less than 1.18.0-24

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References1
NVD
NVD
•added 2022/09/13 2:15 p.m.•31 views

CVE-2022-2989

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS0.00322EPSS
SaveExploits1References2
osv_azl
osv_azl
•added 2022/09/13 2:15 p.m.•15 views

AZL-10964 CVE-2022-2989 affecting package podman for versions less than 4.1.1-10

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.7AI score0.00322EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/09/13 2:15 p.m.•8 views

DEBIAN-CVE-2022-2989

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.3AI score0.00322EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2022/09/13 2:15 p.m.•18 views

AZL-36976 CVE-2022-2989 affecting package podman for versions less than 4.1.1-21

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.5AI score0.00322EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/09/13 2:15 p.m.•12 views

DEBIAN-CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/09/13 2:15 p.m.•15 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References8
osv_azl
osv_azl
•added 2022/09/13 2:15 p.m.•19 views

AZL-10960 CVE-2022-2990 affecting package buildah for versions less than 1.18.0-17

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2022/09/13 2:15 p.m.•69 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.8AI score0.00349EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2022/09/13 2:15 p.m.•68 views

CVE-2022-2989

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.9AI score0.00322EPSS
SaveExploits1References4
Prion
Prion
•added 2022/09/13 2:15 p.m.•27 views

Information disclosure

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

3.2CVSS6.8AI score0.00322EPSS
SaveExploits1References2Affected Software2
osv_ubuntu
osv_ubuntu
•added 2022/09/13 2:15 p.m.•12 views

UBUNTU-CVE-2022-2989

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS5.9AI score0.00322EPSS
SaveExploits1References5
osv_ubuntu
osv_ubuntu
•added 2022/09/13 2:15 p.m.•13 views

UBUNTU-CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References6
CVE
CVE
•added 2022/09/13 1:44 p.m.•438 views

CVE-2022-2990

CVE-2022-2990 (Buildah): The issue stems from incorrect handling of supplementary groups inside a container, which, if an attacker has direct container access and can execute code, may enable information disclosure or data modification. Affected: Buildah/container tools relying on supplementary g...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/09/13 1:44 p.m.•70 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.5AI score0.00349EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2022/09/13 1:44 p.m.•49 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1
Rows per page
Query Builder