cve.bz

CVE-2021-20199

5.9 mediumEPSS 1.2%

Medium (5.9) in podman project podman. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in github.com/containers/podman/v3 3.0.0.

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.

Severity

CVSS 3.1

5.9 medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE
CWE-346
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-grh6-q6m2-rh72Gogithub.com/containers/podman/v3<3.0.03.0.0

References

Check your stackJSON