Podman Origin Validation Error · CVE-2021-20199 · GitHub Advisory Database · GitHub

Podman Origin Validation Error

Moderate severity GitHub Reviewed Published May 18, 2021 to the GitHub Advisory Database • Updated Sep 18, 2023

Package

github.com/containers/podman/v3 (Go)

Affected versions

< 3.0.0

Patched versions

3.0.0

Description

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman versions from 1.8.0 to 3.0.0.

References

Reviewed May 18, 2021

Published to the GitHub Advisory Database May 18, 2021

Last updated Sep 18, 2023

Severity

Moderate

5.9

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

High

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N