Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2022-09-19T19:53:23

Updated: 2024-08-03T00:53:00.585Z

Reserved: 2022-08-25T00:00:00

Link: CVE-2022-2995

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-09-19T20:15:12.493

Modified: 2024-11-21T07:02:03.227

Link: CVE-2022-2995

cve-icon Redhat

Severity : Low

Publid Date: 2022-08-25T00:00:00Z

Links: CVE-2022-2995 - Bugzilla