CLEANSTART-2024-HT53902

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-HT53902.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLEANSTART-2024-HT53902
Upstream
Published
2026-10-31T14:06:10Z
Modified
2026-10-31T16:02:09Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to th...
Details

Security vulnerability affects the podman package. An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to....

References

Affected packages

CleanStart / podman

Package

Name
podman
Purl
pkg:apk/cleanstart/podman

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.3.0-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-HT53902.json"