Beveiligingsadvies

CVE-2019-10214

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-11-25 10:41:15

Laatst bijgewerkt 2024-08-04 22:17:18

Toegewezen door redhat

CVSS-score 6.4

Status PUBLISHED

Beschrijving

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.

← Alle CVE's bekijken Bekijk op cve.org ↗