PT-2018-10144 · Red Hat · Podman

·

CVE-2018-10856

·

Publicado

2018-07-02

·

Atualizado

2024-08-20

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions podman versions prior to 0.6.1
Description The issue arises from podman not dropping capabilities when a container is executed as a non-root user, resulting in unnecessary privileges being granted to the container.
Recommendations For versions prior to 0.6.1, update to version 0.6.1 or later to resolve the issue.

Correção

Incorrect Permission

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2018-10856
GHSA-WP7W-VX86-VJ9H
GO-2023-1962
OPENSUSE-SU-2024:11177-1
RHSA-2018:2037

Produtos afetados

Podman