PT-2022-8289
CVE-2019-25067
·
Published
2019-10-29
·
Updated
2024-05-17
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Podman and Varlink version 1.5.1
Description
A critical issue was found, affecting an unknown part of the component API. This leads to Remote Privilege Escalation and can be initiated remotely. The exploit has been disclosed publicly.
Recommendations
For Podman and Varlink version 1.5.1, update to a version that addresses the Remote Privilege Escalation issue. As a temporary workaround, consider restricting access to the affected API component until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾