Podman 访问控制错误漏洞

漏洞信息详情

Podman中存在访问控制错误漏洞，该漏洞源于未正确检查在特权容器中运行的非根用户的文件权限。容器中的低权限用户可能会滥用此漏洞来访问容器中的任何其他文件。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://bugzilla.redhat.com/show_bug.cgi?id=1915734

来源:MISC

链接:https://bugzilla.redhat.com/show_bug.cgi?id=1915734

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-20188

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161595/Red-Hat-Security-Advisory-2021-0681-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0751

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Podman-file-reading-via-Container-Files-34715

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161624/Red-Hat-Security-Advisory-2021-0705-01.html

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2021-20188

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0737

暂无