CVE-2022-2989CWE-842

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data…

High · published September 13, 2022

CVSS v3.1
7.1
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.0th percentile
Weakness
CWE-842 · Placement of User into Incorrect Group
Published
2022-09-13T13:41Z
EPSS history
Timeline
  • 13 SEP 13:41Z
    An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data…
    cvelistv5