[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwqSlWC0cd6i0bUBBjZlOEZLtjksuMEXMAmkmQxdAgB0":3,"g5a-risk:CVE-2022-27649":248},{"success":4,"data":5,"meta":246},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":118,"references":119,"referencesCount":37,"weaknesses":144,"weaknessesCount":153,"isActivelyExploited":154,"cisaInfo":26,"otxData":26,"relatedBlogPosts":155,"seoMetadata":156,"configurations":181,"relatedVendorCves":244,"notableEvents":245},"CVE-2022-27649","What is CVE-2022-27649?","A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.","A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), ...","2022-04-04T20:15:10.89","2023-11-07T03:45:22.36",7.5,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","LOW","NONE","UNCHANGED",null,1.6,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","MEDIUM","SINGLE","PARTIAL",6,6.8,6.4,0.01429,[40,40,40,40,40,40,40],"High",[44,49,54,58,62,65,69,71,74,76,79,81,84,87,90,92,95,97,100,102,105,107,112,115],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"podman_project","podman","*","cpe:2.3:a:podman_project:podman:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"redhat","developer_tools","1.0","cpe:2.3:a:redhat:developer_tools:1.0:*:*:*:*:*:*:*",{"vendor":50,"product":55,"version":56,"criteria":57,"vulnerable":4},"openshift_container_platform","4.0","cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",{"vendor":50,"product":59,"version":60,"criteria":61,"vulnerable":4},"enterprise_linux","8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":50,"product":59,"version":63,"criteria":64,"vulnerable":4},"8.6","cpe:2.3:o:redhat:enterprise_linux:8.6:*:*:*:*:*:*:*",{"vendor":50,"product":66,"version":67,"criteria":68,"vulnerable":4},"enterprise_linux_eus","8.4","cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*",{"vendor":50,"product":66,"version":63,"criteria":70,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",{"vendor":50,"product":72,"version":60,"criteria":73,"vulnerable":4},"enterprise_linux_for_ibm_z_systems","cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*",{"vendor":50,"product":72,"version":63,"criteria":75,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.6:*:*:*:*:*:*:*",{"vendor":50,"product":77,"version":67,"criteria":78,"vulnerable":4},"enterprise_linux_for_ibm_z_systems_eus","cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*",{"vendor":50,"product":77,"version":63,"criteria":80,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6:*:*:*:*:*:*:*",{"vendor":50,"product":82,"version":60,"criteria":83,"vulnerable":4},"enterprise_linux_for_power_little_endian","cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*",{"vendor":50,"product":85,"version":67,"criteria":86,"vulnerable":4},"enterprise_linux_for_power_little_endian_eus","cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*",{"vendor":50,"product":88,"version":67,"criteria":89,"vulnerable":4},"enterprise_linux_server_aus","cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",{"vendor":50,"product":88,"version":63,"criteria":91,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",{"vendor":50,"product":93,"version":67,"criteria":94,"vulnerable":4},"enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions","cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*",{"vendor":50,"product":93,"version":63,"criteria":96,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*",{"vendor":50,"product":98,"version":67,"criteria":99,"vulnerable":4},"enterprise_linux_server_tus","cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",{"vendor":50,"product":98,"version":63,"criteria":101,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",{"vendor":50,"product":103,"version":67,"criteria":104,"vulnerable":4},"enterprise_linux_server_update_services_for_sap_solutions","cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*",{"vendor":50,"product":103,"version":63,"criteria":106,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":110,"criteria":111,"vulnerable":4},"fedoraproject","fedora","34","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":113,"criteria":114,"vulnerable":4},"35","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":116,"criteria":117,"vulnerable":4},"36","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",24,[120,126,131,134,138,141],{"url":121,"source":122,"tags":123},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2066568","Red Hat",[124,125],"Issue Tracking","Third Party Advisory",{"url":127,"source":128,"tags":129},"https:\u002F\u002Fgithub.com\u002Fcontainers\u002Fpodman\u002Fcommit\u002Faafa80918a245edcbdaceb1191d749570f1872d0","GitHub",[130,125],"Patch",{"url":132,"source":128,"tags":133},"https:\u002F\u002Fgithub.com\u002Fcontainers\u002Fpodman\u002Fsecurity\u002Fadvisories\u002FGHSA-qvf8-p83w-v58j",[125],{"url":135,"source":136,"tags":137},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F4KDETHL5XCT6RZN2BBNOCEXRZ2W3SFU3\u002F","Fedoraproject",[],{"url":139,"source":136,"tags":140},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FDLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ\u002F",[],{"url":142,"source":136,"tags":143},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FJ5WPM42UR6XIBQNQPNQHM32X7S4LJTRX\u002F",[],[145],{"id":146,"name":147,"description":148,"extendedDescription":149,"status":150,"abstraction":151,"structure":152},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",1,false,[],{"title":157,"metaDescription":158,"keywords":159,"canonicalUrl":160,"structuredData":161},"What is CVE-2022-27649? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-27649, a high severity cyber security vulnerability from 2022. A flaw was found in Podman, where containers were started i...","CVE-2022-27649, CVE-2022-27649 vulnerability, CVE-2022-27649 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, podman_project security, redhat security, podman vulnerability, developer_tools vulnerability, openshift_container_platform vulnerability, enterprise_linux vulnerability, enterprise_linux_eus vulnerability","\u002Fwhat-is\u002Fcve-2022-27649",{"@context":162,"@type":163,"headline":157,"description":158,"datePublished":10,"dateModified":11,"author":164,"publisher":168,"about":172,"mainEntityOfPage":176,"articleSection":179,"keywords":180},"https:\u002F\u002Fschema.org","TechArticle",{"@type":165,"name":166,"url":167},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":165,"name":166,"url":167,"logo":169},{"@type":170,"url":171},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":173,"name":6,"description":174,"additionalType":175},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":177,"@id":178},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-27649","Cybersecurity","CVE-2022-27649, CVE-2022-27649 vulnerability, CVE-2022-27649 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[182,190,234],{"Operator":26,"Negate":26,"Nodes":183},[184],{"Operator":185,"Negate":26,"CPEMatch":186},"OR",[187],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":188,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":189,"VersionEndIncluding":26},"604D6316-6B11-47F6-8016-A0091A2B9003","4.0.3",{"Operator":26,"Negate":26,"Nodes":191},[192],{"Operator":185,"Negate":26,"CPEMatch":193},[194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"60937D60-6B78-400F-8D30-7FCF328659A1",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":197,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"932D137F-528B-4526-9A89-CD59FA1AB0FE",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3538B4DC-0F7D-4574-8F31-07D52AC854A0",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0E3F09B5-569F-4C58-9FCA-3C0953D107B5",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6C3741B8-851F-475D-B428-523F4F722350",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":207,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"87C21FE1-EA5C-498F-9C6C-D05F91A88217",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4063768E-67FA-4940-8A0C-101C1EFD0D7E",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8C9BD9AE-46FC-4609-8D99-A3CFE91D58D1",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9EF5C4AC-CA69-41E3-AD93-7AC21931374A",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":215,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"47811209-5CE5-4375-8391-B0A7F6A0E420",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":217,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"983533DD-3970-4A37-9A9C-582BD48AA1E5",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E28F226A-CBC7-4A32-BE58-398FA5B42481",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":221,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"76C24D94-834A-4E9D-8F73-624AFA99AAA2",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"22D095ED-9247-4133-A133-73B7668565E4",{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"871A5C26-DB7B-4870-A5B2-5DD24C90B4A7",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":227,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AC10D919-57FD-4725-B8D2-39ECB476902F",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":229,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1272DF03-7674-4BD4-8E64-94004B195448",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":231,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BC6DD887-9744-43EA-8B3C-44C6B6339590",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":233,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7614E5D3-4643-4CAE-9578-9BB9D558211F",{"Operator":26,"Negate":26,"Nodes":235},[236],{"Operator":185,"Negate":26,"CPEMatch":237},[238,240,242],{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":239,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A930E247-0B43-43CB-98FF-6CE7B8189835",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":241,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"80E516C0-98A4-4ADE-B69F-66A772E2BAAA",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":243,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",[],[],{"lastModified":11,"cacheTime":247,"version":32},1792344855372,{"score":249,"band":250,"action":251,"scoredAt":252},46,"Medium","Plan remediation","2026-10-16T06:54:01.857905+00:00"]