What is CVE-2022-4123?

CVE-2022-4123 is a low-severity vulnerability in Podman_project Podman, classified under Relative Path Traversal. CVSS score: 3.3/10. Published 2022-12-08.

How severe is CVE-2022-4123?

Low severity. CVSS v3 base score is 3.3 out of 10.

Path Traversal in Podman_project Podman

CVE-2022-4123

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.

EPSS: 0.002 (14.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Podman_project Podman — versions 4.1.0, 4.1.1, 4.2.0
Fedoraproject Fedora — versions 35, 36, 37
N/a Podman — versions Podman 4.3.0

Weakness classification (CWE)

CWE-23 — Relative Path Traversal
CWE-22 — Path Traversal

References

secalert@redhat.com (Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2022-4123?: CVE-2022-4123 is a low-severity vulnerability in Podman_project Podman, classified under Relative Path Traversal. CVSS score: 3.3/10. Published 2022-12-08.
How severe is CVE-2022-4123?: Low severity. CVSS v3 base score is 3.3 out of 10.