CVE-2020-14370
- State
- Published
- Severity
- Not scored
- Published
- Sep 23, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jun 17, 2020
Description
An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
podmann/a |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1874268
- FEDORA-2020-76fcd0ba34vendor-advisory
- FEDORA-2020-7b6058fec9vendor-advisory
- FEDORA-2020-3a4b8fca5evendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.