Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Information Disclosure

🗓️ 16 Sep 2022 06:55:11Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 46 Views

Vulnerability in Buildah `configureUIDGID` function allows unauthorized access

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2022-2990
13 Sep 202214:15
–attackerkb
Tenable Nessus		AlmaLinux 8 : container-tools:rhel8 (ALSA-2022:7457)
12 Nov 202200:00
–nessus
Tenable Nessus		AlmaLinux 8 : container-tools:rhel8 (ALSA-2022:7822)
14 Nov 202200:00
–nessus
Tenable Nessus		AlmaLinux 9 : buildah (ALSA-2022:8008)
19 Nov 202200:00
–nessus
Tenable Nessus		AlmaLinux 9 : podman (ALSA-2022:8431)
18 Nov 202200:00
–nessus
Tenable Nessus		CentOS 8 : container-tools:rhel8 (CESA-2022:7457)
9 Nov 202200:00
–nessus
Tenable Nessus		CentOS 8 : container-tools:rhel8 (CESA-2022:7822)
8 Nov 202200:00
–nessus
Tenable Nessus		CBL Mariner 2.0 Security Update: buildah (CVE-2022-2990)
3 Jul 202400:00
–nessus
Tenable Nessus		MiracleLinux 8 : container-tools:rhel8 (AXSA:2022-4425:01)
20 Jan 202600:00
–nessus
Tenable Nessus		MiracleLinux 8 : container-tools:rhel8 (AXSA:2022-4470:01)
20 Jan 202600:00
–nessus
Rows per page
Vulners
Node
buildah_projectbuildahMatch1.22.3-r0go
AND
buildah_projectbuildahMatch1.27.0-r0go
AND
buildah_projectbuildahMatch1.23.1-r1go
AND
buildah_projectbuildahMatch1.27.1-r0go
AND
buildah_projectbuildahMatch1.22.0-r0go
AND
buildah_projectbuildahMatch1.23.1-r0go
AND
buildah_projectbuildahMatch1.21.1-r0go
AND
buildah_projectbuildahMatch1.27.0-r1go
AND
buildah_projectbuildahMatch1.21.4-r0go
AND
buildah_projectbuildahMatch1.20.1-r0go
AND
buildah_projectbuildahMatch1.24.1-r0go
AND
buildah_projectbuildahMatch1.14.3-r0go
AND
buildah_projectbuildahMatch1.26.1-r0go
AND
buildah_projectbuildahMatch1.27.2-r1go
AND
buildah_projectbuildahMatch1.14.8-r1go
AND
buildah_projectbuildahMatch1.27.2-r0go
AND
buildah_projectbuildahMatch1.24.2-r0go
AND
buildah_projectbuildahMatch1.14.1-r0go
AND
buildah_projectbuildahMatch1.14.5-r0go
AND
buildah_projectbuildahMatch1.14.8-r0go
AND
buildah_projectbuildahMatch1.19.6-r0go
AND
buildah_projectbuildahMatch1.14.2-r0go
AND
buildah_projectbuildahMatch1.21.2-r0go
AND
buildah_projectbuildahMatch1.24.2-r1go
AND
buildah_projectbuildahMatch1.25.1-r1go
AND
buildah_projectbuildahMatch1.21.3-r0go
AND
buildah_projectbuildahMatch1.26.4-r0go
AND
buildah_projectbuildahMatch1.26.2-r1go
AND
buildah_projectbuildahMatch1.24.0-r0go
AND
buildah_projectbuildahMatch1.22.3-r1go
AND
buildah_projectbuildahMatch1.20.0-r0go
AND
buildah_projectbuildahMatch1.14.4-r0go
AND
buildah_projectbuildahMatch1.26.2-r0go
AND
buildah_projectbuildahMatch1.21.0-r1go
AND
buildah_projectbuildahMatch1.14.9-r0go
AND
buildah_projectbuildahMatch1.19.8-r0go
AND
buildah_projectbuildahMatch1.23.0-r0go
AND
buildah_projectbuildahMatch1.14.6-r0go
AND
buildah_projectbuildahMatch1.21.0-r0go
AND
buildah_projectbuildahMatch1.26.1-r1go
AND
buildah_projectbuildahMatch1.25.1-r0go
AND
alpinelinuxalpine_linuxMatchedge
OR
containers_projectgithub.com/containers/buildahRangev1.27.0–1.27.0go
OR
buildah_projectbuildahMatch1.24.5_2.module_el8.7.0+1197+29cf2b8e
OR
buildah_projectbuildahMatch1.9.0_5.module_el8.1.0+237+63e26edc
OR
buildah_projectbuildahMatch1.9.0_2.el7.centos
OR
buildah_projectbuildahMatch1.19.9_1.module_el8.5.0+1006+8d0e68a2
OR
buildah_projectbuildahMatch1.11.6_6.rhaos4.4.el8
OR
buildah_projectbuildahMatch1.19.7_2.module_el8.4.0+830+8027e1c4
OR
buildah_projectbuildahMatch1.15.0_1.module_el8.3.0+432+2e9cbcd8
OR
buildah_projectbuildahMatch1.24.0_0.7.module_el8.6.0+944+d413f95e
OR
buildah_projectbuildahMatch1.11.6_4.module_el8.1.0+292+7d7c672e
OR
buildah_projectbuildahMatch1.22.3_1.module_el8.5.0+901+79ce9cba
OR
buildah_projectbuildahMatch1.5_5.gite94b4f9.module_el8.1.0+236+34fc7673
OR
buildah_projectbuildahMatch1.27.0_2.module_el8.7.0+1196+721f4eb0
OR
buildah_projectbuildahMatch1.23.4_2.el8
OR
buildah_projectbuildahMatch1.11.6_7.rhaos4.4.el8
OR
buildah_projectbuildahMatch1.11.2_2.git0bafbfe.el7
OR
buildah_projectbuildahMatch1.19.9_6.module_el8.7.0+1217+ea57d1f1
OR
buildah_projectbuildahMatch1.22.3_2.module_el8.6.0+926+8bef8ae7
OR
buildah_projectbuildahMatch1.8.1_1.git57b4288.el7
OR
buildah_projectbuildahMatch1.19.7_1.module_el8.4.0+781+acf4c33b
OR
buildah_projectbuildahMatch1.11.6_5.el8
OR
buildah_projectbuildahMatch1.19.7_1.module_el8.5.0+736+58cc1a5a
OR
buildah_projectbuildahMatch1.19.7_1.el8
OR
buildah_projectbuildahMatch1.5_2.gite94b4f9.el7.centos
OR
buildah_projectbuildahMatch1.11.6_9.module_el8.5.0+1004+c00a74f5
OR
buildah_projectbuildahMatch1.5_3.gite94b4f9.module_el8.1.0+294+988780c8
OR
buildah_projectbuildahMatch1.5_6.gite94b4f9.module_el8.1.0+299+10c6b3e0
OR
buildah_projectbuildahMatch1.11.6_4.el8
OR
buildah_projectbuildahMatch1.2_2.gitbe87762.el7
OR
buildah_projectbuildahMatch1.9.0_1.el7.centos
OR
buildah_projectbuildahMatch1.11.6_7.module_el8.2.0+305+5e198a41
OR
buildah_projectbuildahMatch1.5_3.gite94b4f9.module_el8.0.0+58+91b614e7
OR
buildah_projectbuildahMatch1.7.1_2.git93747b1.el7.centos
OR
buildah_projectbuildahMatch1.5_4.gite94b4f9.module_el8.2.0+303+1105185b
OR
buildah_projectbuildahMatch1.21.4_2.module_el8.5.0+870+f792de72
OR
buildah_projectbuildahMatch0.15_1.gitd1330a5.el7
OR
buildah_projectbuildahMatch1.19.3_1.module_el8.4.0+673+eabfc99d
OR
buildah_projectbuildahMatch1.7.1_2.git93747b1.el7
OR
buildah_projectbuildahMatch1.5_8.gite94b4f9.module_el8.4.0+521+9df8e6d3
OR
buildah_projectbuildahMatch1.22.3_2.module_el8.5.0+911+f19012f9
OR
buildah_projectbuildahMatch1.22.0_0.2.module_el8.5.0+874+6db8bee3
OR
buildah_projectbuildahMatch1.5_3.gite94b4f9.module_el8.0.0+57+bb81156c
OR
buildah_projectbuildahMatch0.16_3.git532e267.el7
OR
buildah_projectbuildahMatch1.19.9_1.el8
OR
buildah_projectbuildahMatch1.11.6_6.module_el8.1.0+298+41f9343a
OR
buildah_projectbuildahMatch1.19.9_1.module_el8.6.0+1107+d59a301b
OR
buildah_projectbuildahMatch1.21.4_2.module_el8.4.0+942+d25aada8
OR
buildah_projectbuildahMatch1.4_3.gitc8ed967.el7
OR
buildah_projectbuildahMatch1.22.0_2.module_el8.5.0+890+6b136101
OR
buildah_projectbuildahMatch1.27.0_2.module_el8.7.0+1216+b022c01d
OR
buildah_projectbuildahMatch1.11.6_4.module_el8.1.0+293+ad8ef41f
OR
buildah_projectbuildahMatch1.11.6_9.rhaos4.5.el8
OR
buildah_projectbuildahMatch1.11.6_7.module_el8.2.0+458+dab581ed
OR
buildah_projectbuildahMatch1.22.0_2.module_el8.5.0+877+1c30e0c9
OR
buildah_projectbuildahMatch1.1_1.gitfbf46d3.el7
OR
buildah_projectbuildahMatch1.5_8.gite94b4f9.module_el8.3.0+569+1bada2e4
OR
buildah_projectbuildahMatch1.24.2_2.module_el8.7.0+1106+45480ee0
OR
buildah_projectbuildahMatch0.11_3.git49095a8.el7
OR
buildah_projectbuildahMatch1.24.2_2.module_el8.6.0+1108+b13568aa
OR
buildah_projectbuildahMatch1.19.8_1.module_el8.5.0+733+9bb5dffa
OR
buildah_projectbuildahMatch1.16.7_1.module_el8.4.0+581+8bd31022
OR
buildah_projectbuildahMatch1.7_2.git873f001.el7
OR
buildah_projectbuildahMatch1.11.6_8.el7_8
OR
buildah_projectbuildahMatch1.19.0_2.module_el8.4.0+641+6116a774
OR
buildah_projectbuildahMatch1.11.6_8.module_el8.3.0+479+69e2ae26
OR
buildah_projectbuildahMatch1.19.7_1.module_el8.4.0+786+4668b267
OR
buildah_projectbuildahMatch1.19.7_2.el8
OR
buildah_projectbuildahMatch1.11.6_11.el7_8
OR
buildah_projectbuildahMatch1.11.6_6.rhaos4.3.el8
OR
buildah_projectbuildahMatch1.16.7_4.module_el8.3.0+699+d61d9c41
OR
buildah_projectbuildahMatch1.11.6_8.rhaos4.5.el8
OR
buildah_projectbuildahMatch1.21.4_1.module_el8.4.0+886+c9a8d9ad
OR
buildah_projectbuildahMatch1.16.5_4.module_el8.4.0+575+63b40ad7
OR
buildah_projectbuildahMatch1.11.6_4.module_el8.1.0+272+3e64ee36
OR
buildah_projectbuildahMatch1.8.2_2.gite23314b.el7.centos
OR
buildah_projectbuildahMatch1.11.6_8.module_el8.4.0+522+66908d0c
OR
buildah_projectbuildahMatch1.15.1_2.module_el8.3.0+475+c50ce30b
OR
buildah_projectbuildahMatch1.11.6_6.module_el8.2.0+304+65a3c2ac
OR
buildah_projectbuildahMatch1.23.1_2.module_el8.6.0+954+963caf36
OR
buildah_projectbuildahMatch1.24.5_2.module_el8.7.0+1197+29cf2b8e
OR
buildah_projectbuildahMatch1.9.0_5.module_el8.1.0+237+63e26edc
OR
buildah_projectbuildahMatch1.9.0_2.el7.centos
OR
buildah_projectbuildahMatch1.19.9_1.module_el8.5.0+1006+8d0e68a2
OR
buildah_projectbuildahMatch1.11.6_6.rhaos4.4.el8
OR
buildah_projectbuildahMatch1.19.7_2.module_el8.4.0+830+8027e1c4
OR
buildah_projectbuildahMatch1.15.0_1.module_el8.3.0+432+2e9cbcd8
OR
buildah_projectbuildahMatch1.24.0_0.7.module_el8.6.0+944+d413f95e
OR
buildah_projectbuildahMatch1.11.6_4.module_el8.1.0+292+7d7c672e
OR
buildah_projectbuildahMatch1.22.3_1.module_el8.5.0+901+79ce9cba
OR
buildah_projectbuildahMatch1.5_5.gite94b4f9.module_el8.1.0+236+34fc7673
OR
buildah_projectbuildahMatch1.27.0_2.module_el8.7.0+1196+721f4eb0
OR
buildah_projectbuildahMatch1.23.4_2.el8
OR
buildah_projectbuildahMatch1.11.6_7.rhaos4.4.el8
OR
buildah_projectbuildahMatch1.11.2_2.git0bafbfe.el7
OR
buildah_projectbuildahMatch1.19.9_6.module_el8.7.0+1217+ea57d1f1
OR
buildah_projectbuildahMatch1.22.3_2.module_el8.6.0+926+8bef8ae7
OR
buildah_projectbuildahMatch1.8.1_1.git57b4288.el7
OR
buildah_projectbuildahMatch1.19.7_1.module_el8.4.0+781+acf4c33b
OR
buildah_projectbuildahMatch1.11.6_5.el8
OR
buildah_projectbuildahMatch1.19.7_1.module_el8.5.0+736+58cc1a5a
OR
buildah_projectbuildahMatch1.19.7_1.el8
OR
buildah_projectbuildahMatch1.5_2.gite94b4f9.el7.centos
OR
buildah_projectbuildahMatch1.11.6_9.module_el8.5.0+1004+c00a74f5
OR
buildah_projectbuildahMatch1.5_3.gite94b4f9.module_el8.1.0+294+988780c8
OR
buildah_projectbuildahMatch1.5_6.gite94b4f9.module_el8.1.0+299+10c6b3e0
OR
buildah_projectbuildahMatch1.11.6_4.el8
OR
buildah_projectbuildahMatch1.2_2.gitbe87762.el7
OR
buildah_projectbuildahMatch1.9.0_1.el7.centos
OR
buildah_projectbuildahMatch1.11.6_7.module_el8.2.0+305+5e198a41
OR
buildah_projectbuildahMatch1.5_3.gite94b4f9.module_el8.0.0+58+91b614e7
OR
buildah_projectbuildahMatch1.7.1_2.git93747b1.el7.centos
OR
buildah_projectbuildahMatch1.5_4.gite94b4f9.module_el8.2.0+303+1105185b
OR
buildah_projectbuildahMatch1.21.4_2.module_el8.5.0+870+f792de72
OR
buildah_projectbuildahMatch0.15_1.gitd1330a5.el7
OR
buildah_projectbuildahMatch1.19.3_1.module_el8.4.0+673+eabfc99d
OR
buildah_projectbuildahMatch1.7.1_2.git93747b1.el7
OR
buildah_projectbuildahMatch1.5_8.gite94b4f9.module_el8.4.0+521+9df8e6d3
OR
buildah_projectbuildahMatch1.22.3_2.module_el8.5.0+911+f19012f9
OR
buildah_projectbuildahMatch1.22.0_0.2.module_el8.5.0+874+6db8bee3
OR
buildah_projectbuildahMatch1.5_3.gite94b4f9.module_el8.0.0+57+bb81156c
OR
buildah_projectbuildahMatch0.16_3.git532e267.el7
OR
buildah_projectbuildahMatch1.19.9_1.el8
OR
buildah_projectbuildahMatch1.11.6_6.module_el8.1.0+298+41f9343a
OR
buildah_projectbuildahMatch1.19.9_1.module_el8.6.0+1107+d59a301b
OR
buildah_projectbuildahMatch1.21.4_2.module_el8.4.0+942+d25aada8
OR
buildah_projectbuildahMatch1.4_3.gitc8ed967.el7
OR
buildah_projectbuildahMatch1.22.0_2.module_el8.5.0+890+6b136101
OR
buildah_projectbuildahMatch1.27.0_2.module_el8.7.0+1216+b022c01d
OR
buildah_projectbuildahMatch1.11.6_4.module_el8.1.0+293+ad8ef41f
OR
buildah_projectbuildahMatch1.11.6_9.rhaos4.5.el8
OR
buildah_projectbuildahMatch1.11.6_7.module_el8.2.0+458+dab581ed
OR
buildah_projectbuildahMatch1.22.0_2.module_el8.5.0+877+1c30e0c9
OR
buildah_projectbuildahMatch1.1_1.gitfbf46d3.el7
OR
buildah_projectbuildahMatch1.5_8.gite94b4f9.module_el8.3.0+569+1bada2e4
OR
buildah_projectbuildahMatch1.24.2_2.module_el8.7.0+1106+45480ee0
OR
buildah_projectbuildahMatch0.11_3.git49095a8.el7
OR
buildah_projectbuildahMatch1.24.2_2.module_el8.6.0+1108+b13568aa
OR
buildah_projectbuildahMatch1.19.8_1.module_el8.5.0+733+9bb5dffa
OR
buildah_projectbuildahMatch1.16.7_1.module_el8.4.0+581+8bd31022
OR
buildah_projectbuildahMatch1.7_2.git873f001.el7
OR
buildah_projectbuildahMatch1.11.6_8.el7_8
OR
buildah_projectbuildahMatch1.19.0_2.module_el8.4.0+641+6116a774
OR
buildah_projectbuildahMatch1.11.6_8.module_el8.3.0+479+69e2ae26
OR
buildah_projectbuildahMatch1.19.7_1.module_el8.4.0+786+4668b267
OR
buildah_projectbuildahMatch1.19.7_2.el8
OR
buildah_projectbuildahMatch1.11.6_11.el7_8
OR
buildah_projectbuildahMatch1.11.6_6.rhaos4.3.el8
OR
buildah_projectbuildahMatch1.16.7_4.module_el8.3.0+699+d61d9c41
OR
buildah_projectbuildahMatch1.11.6_8.rhaos4.5.el8
OR
buildah_projectbuildahMatch1.21.4_1.module_el8.4.0+886+c9a8d9ad
OR
buildah_projectbuildahMatch1.16.5_4.module_el8.4.0+575+63b40ad7
OR
buildah_projectbuildahMatch1.11.6_4.module_el8.1.0+272+3e64ee36
OR
buildah_projectbuildahMatch1.8.2_2.gite23314b.el7.centos
OR
buildah_projectbuildahMatch1.11.6_8.module_el8.4.0+522+66908d0c
OR
buildah_projectbuildahMatch1.15.1_2.module_el8.3.0+475+c50ce30b
OR
buildah_projectbuildahMatch1.11.6_6.module_el8.2.0+304+65a3c2ac
OR
buildah_projectbuildahMatch1.23.1_2.module_el8.6.0+954+963caf36
OR
buildah_projectbuildahMatch1.23.4_5.rhaos4.12.el9
OR
buildah_projectbuildahMatch1.23.4_4.rhaos4.12.el9
OR
buildah_projectbuildahMatch1.23.4_3.rhaos4.12.el9
OR
buildah_projectbuildahMatch1.23.4_4.1.rhaos4.12.el8
OR
buildah_projectbuildahMatch1.24.6_6.module_el8+459+2bdc3b51
OR
buildah_projectbuildahMatch1.24.6_3.module_el8.8.0+1255+530d102a
OR
buildah_projectbuildahMatch1.28.2_2.module_el8.8.0+1254+78119b6e
OR
buildah_projectbuildahMatch1.29.1_2.rhaos4.13.el8
OR
buildah_projectbuildahMatch1.19.9_1.1.el8
OR
buildah_projectbuildahMatch1.23.4_3.rhaos4.12.el8
OR
buildah_projectbuildahMatch1.30.0_2.module_el8+460+8cac93c8
OR
buildah_projectbuildahMatch1.23.4_5.1.rhaos4.12.el8
OR
buildah_projectbuildahMatch1.23.4_4.rhaos4.12.el8
OR
buildah_projectbuildahMatch1.23.4_3.rhaos4.11.el8
OR
podman_projectpodmanMatch4.2.0_5.rhaos4.12.el9
OR
podman_projectpodmanMatch4.2.0_7.rhaos4.12.el9
OR
podman_projectpodmanMatch4.2.0_4.rhaos4.12.el9

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
12 Feb 2023 23:22Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.17.1
EPSS0.00322
buildahconfigureuidgidinformation disclosurecontainer engineunauthorized access
46