CVE-2021-20199CWE-346

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts)

published February 2, 2021

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01145 · 66.5th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2021-02-02T18:12Z
EPSS history
Timeline
  • 02 FEB 18:12Z
    Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts)
    cvelistv5