Back to Database
Status published
High
CVE-2019-10152
A path traversal vulnerability has been discovered in podman before...
Vulnerability Description
A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacker who has compromised an existing container can cause arbitrary files on the host filesystem to be read/written when an administrator tries to copy a file from/to the container.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10152
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
Podman
View all reports →Affected Software
podman
Vulnerable Versions:
fixed in 1.4.0
Timeline
Official Publish:
July 30th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
MITRE ATT&CK TTPs
T1574
Hijack Execution Flow
Privilege Escalation
T1222
File and Directory Permissions Modification
Defense Evasion
T1005
Data from Local System
Collection
T1565
Data Manipulation
Impact
T1078
Valid Accounts
Persistence
T1190
Exploit Public-Facing Application
Initial Access
T1552
Unsecured Credentials
Credential Access
T1565.001
Stored Data Manipulation
Impact