| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/containers/image | < 2.0.2-0.20190802080134-634605d06e73+incompatible< 3.0.0 | 2.0.2-0.20190802080134-634605d06e73+incompatible3.0.0 |
| openshift container platform | = 4.1 |
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free