CVE-2025-6032
Podman: podman missing tls verification
A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
podmanRed Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat · Red Hat OpenShift Container Platform 4Red Hat · Red Hat OpenShift Container Platform 4.16Red Hat · Red Hat OpenShift Container Platform 4.17Red Hat · Red Hat OpenShift Container Platform 4.18Red Hat · Red Hat OpenShift Container Platform 4.19Red Hat · Red Hat OpenShift Container Platform 4.20Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
https://access.redhat.com/errata/RHSA-2025:10295https://access.redhat.com/errata/RHSA-2025:10549https://access.redhat.com/errata/RHSA-2025:10550https://access.redhat.com/errata/RHSA-2025:10551https://access.redhat.com/errata/RHSA-2025:10668https://access.redhat.com/errata/RHSA-2025:11359https://access.redhat.com/errata/RHSA-2025:11363https://access.redhat.com/errata/RHSA-2025:11677https://access.redhat.com/errata/RHSA-2025:11681https://access.redhat.com/errata/RHSA-2025:15397https://access.redhat.com/errata/RHSA-2025:9726https://access.redhat.com/errata/RHSA-2025:9751