CVE-2022-1227
HIGHPodman < 4.0.0 - Improper Privilege Management
Title source: ruleDescription
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
Exploits (1)
nomisec
WORKING POC
1 stars
by LouisLiuNova · poc
https://github.com/LouisLiuNova/CVE-2022-1227_Exploit
References (4)
Scores
CVSS v3
8.8
EPSS
0.3372
EPSS Percentile
97.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-269
CWE-281
Status
published
Products (22)
containers/podman
0 - 3.4Go
containers/psgo
0 - 1.7.2Go
fedoraproject/fedora
34
fedoraproject/fedora
35
podman_project/podman
< 4.0.0
psgo_project/psgo
< 1.7.2
redhat/developer_tools
1.0
redhat/enterprise_linux
7.0
redhat/enterprise_linux
8.0
redhat/enterprise_linux_eus
8.6
... and 12 more
Published
Apr 29, 2022
Tracked Since
Feb 18, 2026