description: The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive information stored in environment variables.
problem types: CWE-200
affected:
{
product: podman
vendor: n/a
versions:
status: affected, version: podman 1.6.4-32.el7_9
}