Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if owned by the root user inside the container. It does not allow to directly escape the container, though being a privileged container means that a lot of security features are disabled when running the container. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Information
N/A
Vulnerability Type
授权机制不正确
Vulnerability Title
Podman 访问控制错误漏洞
Vulnerability Description
Podman中存在访问控制错误漏洞，该漏洞源于未正确检查在特权容器中运行的非根用户的文件权限。容器中的低权限用户可能会滥用此漏洞来访问容器中的任何其他文件。
CVSS Information
N/A
Vulnerability Type
N/A