Vulnerability · Published Sep 1, 2022 · Assigned by redhat

CVE-2022-2739

Medium 5.3

In plain English

A medium-severity information exposure in podman. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS NVD)5.3Medium

Exploit odds (30 days)0.5%top 55.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive information stored in environment variables.

Affected products (as reported)

Vendor	Product	Versions
n/a	podman	podman 1.6.4-32.el7_9

Weakness: CWE-200

References

https://bugzilla.redhat.com/show_bug.cgi?id=2116927 x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2022-2739 x_refsource_MISC