CVE Database
/

CVE-2022-1227

Back to search

CVE-2022-1227

Published: Apr 29, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

VendorProductVersions

n/a

psgo

affected
podman 4.0, psgo 1.7.2

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now