Description
It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.
Scores
CVSS v3
5.3
EPSS
0.0022
EPSS Percentile
44.0%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-250
CWE-732
Status
published
Products (2)
containers/podman
0 - 0.6.1Go
libpod_project/libpod
< 0.6.1
Published
Jul 03, 2018
Tracked Since
Feb 18, 2026