CVE:CVE-2022-1227
CNNVD:CNNVD-202204-3975
Podman是一款用于在Linux系统上开发、管理和运行OCI容器的引擎。
Podman存在权限许可和访问控制问题漏洞，该漏洞由于运行时权限管理不当而存在该漏洞该漏洞允许远程攻击者提升系统的权限。
solution:Upgrade podman_project podman to a higher version than 4.0.0,and avoid the version (,4.0.0); Upgrade psgo_project psgo to a higher version than 1.7.2,and avoid the version (,1.7.2); Upgrade redhat developer_tools to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat openshift_container_platform to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat quay to a higher version than 3.0.0,and avoid the version 3.0.0; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 7.0,8.6,and avoid the version 7.0,8.6; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 7.0,8.6,and avoid the version 7.0,8.6; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35