1. Home
  2. Vulnerabilities
  3. CVE-2022-2989

CVE-2022-2989

CVSS v3.1 7.1 (High)
71% Progress
EPSS 0.05 % (19th)
0.05% Progress
Affected Products 3
Advisories 20
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

Weaknesses
CWE-842
Placement of User into Incorrect Group
CWE-863
Incorrect Authorization
CVE Status
PUBLISHED
CNA
Red Hat, Inc.
Published Date
2022-09-13 14:15:08
(2 years ago)
Updated Date
2023-02-12 22:15:29
(19 months ago)

Affected Products

Podman Project

Redhat

Configuration #1

    CPE23 From Up To
  Podman Project Podman cpe:2.3:a:podman_project:podman

Configuration #2

    CPE23 From Up To
  Redhat Openshift Container Platform 3.11 cpe:2.3:a:redhat:openshift_container_platform:3.11
  Redhat Openshift Container Platform 4.0 cpe:2.3:a:redhat:openshift_container_platform:4.0
  Redhat Enterprise Linux 7.0 cpe:2.3:o:redhat:enterprise_linux:7.0
  Redhat Enterprise Linux 8.0 cpe:2.3:o:redhat:enterprise_linux:8.0
  Redhat Enterprise Linux 9.0 cpe:2.3:o:redhat:enterprise_linux:9.0