Buildah (as part of Podman) vulnerable to Path Traversal
A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-4123US | low3.3 | — | ||
A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://bugzilla.redhat.com/show_bug.cgi?id=2144989WEB
- https://github.com/containers/podmanPACKAGE
- https://github.com/containers/podman/commit/7934b77dd5372c22063686a218b8b48c2fcaca8cWEB
- https://github.com/containers/podman/issues/13293WEB
- https://github.com/containers/podman/pull/13531WEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-4123ADVISORY
- https://pkg.go.dev/vuln/GO-2022-1159WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan