PT-2022-18405 · Red Hat · Podman

Mauro Matteo Cascella · Published 2022-09-01 · Updated 2023-07-21 · CVE-2022-2739

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions podman versions prior to the version fixed via RHSA-2020:5056

Description The issue could possibly allow an attacker to gain access to sensitive information stored in environment variables, such as those defined by environment variable.

Recommendations For versions prior to the one fixed via RHSA-2020:5056, update to a version that includes the fix for the issue.

Fix

Information Disclosure

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-200

CWE-312

Related Identifiers

CVE-2022-2739

RHSA-2022:6119

Affected Products

Podman

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-2739 · Security Note
• https://osv.dev/vulnerability/CVE-2022-2739 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-20240.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2116927 · Note
• https://t.me/cvenotify/43463 · Telegram Post
• https://t.me/cvenotify/44161 · Telegram Post
• https://access.redhat.com/security/cve/CVE-2022-2739 · Note