Lucene search
+L

240 matches found

Github Security Blog
Github Security Blog
•added 2022/09/14 12:00 a.m.•40 views

Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References8Affected Software1
Github Security Blog
Github Security Blog
•added 2022/09/14 12:00 a.m.•50 views

Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.7AI score0.00322EPSS
SaveExploits1References11Affected Software2
OSV
OSV
•added 2022/09/14 12:00 a.m.•35 views

GHSA-4WJJ-JWC9-2X96 Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.7AI score0.00542EPSS
SaveExploits2References11
OSV
OSV
•added 2022/09/14 12:00 a.m.•46 views

GHSA-FJM8-M7M6-2FJP Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.7AI score0.00542EPSS
SaveExploits2References8
attackerkb
attackerkb
•added 2022/09/13 2:15 p.m.•13 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References8
OSV
OSV
•added 2022/09/13 2:15 p.m.•7 views

DEBIAN-CVE-2022-2989

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.3AI score0.00322EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/13 2:15 p.m.•13 views

AZL-10964 CVE-2022-2989 affecting package podman for versions less than 4.1.1-10

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.7AI score0.00322EPSS
SaveExploits1References1
NVD
NVD
•added 2022/09/13 2:15 p.m.•31 views

CVE-2022-2989

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS0.00322EPSS
SaveExploits1References2
NVD
NVD
•added 2022/09/13 2:15 p.m.•30 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS0.00349EPSS
SaveExploits1References2
OSV
OSV
•added 2022/09/13 2:15 p.m.•15 views

AZL-10960 CVE-2022-2990 affecting package buildah for versions less than 1.18.0-17

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/13 2:15 p.m.•13 views

AZL-36935 CVE-2022-2990 affecting package buildah for versions less than 1.18.0-24

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/13 2:15 p.m.•9 views

DEBIAN-CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/13 2:15 p.m.•17 views

AZL-36976 CVE-2022-2989 affecting package podman for versions less than 4.1.1-21

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.5AI score0.00322EPSS
SaveExploits1References1
Prion
Prion
•added 2022/09/13 2:15 p.m.•26 views

Information disclosure

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

3.2CVSS6.8AI score0.00322EPSS
SaveExploits1References2Affected Software2
UbuntuCve
UbuntuCve
•added 2022/09/13 2:15 p.m.•67 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.8AI score0.00349EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2022/09/13 2:15 p.m.•67 views

CVE-2022-2989

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS6.9AI score0.00322EPSS
SaveExploits1References4
OSV
OSV
•added 2022/09/13 2:15 p.m.•12 views

UBUNTU-CVE-2022-2989

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

7.1CVSS5.9AI score0.00322EPSS
SaveExploits1References5
OSV
OSV
•added 2022/09/13 2:15 p.m.•11 views

UBUNTU-CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS6.9AI score0.00349EPSS
SaveExploits1References6
Mend
Mend
•added 2022/09/13 1:44 p.m.•1 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

8.4CVSS0.00349EPSS
SaveExploits1References11
Cvelist
Cvelist
•added 2022/09/13 1:44 p.m.•67 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.5AI score0.00349EPSS
SaveExploits1References2
Rows per page
Query Builder