AZL-64454
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-64454.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-64454
- Upstream
- Published
- 2025-06-24T14:15:30Z
- Modified
- 2026-04-01T05:20:19.365019Z
- Summary
- CVE-2025-6032 affecting package podman 5.6.1-7
- Details
-
A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.
- References