CVE-2019-10214 : The containers/image library used by the container tools Podman, Buildah, and Sk

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.

Published 2019-11-25 11:15:11

Updated 2021-10-28 13:58:12

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2019-10214

Redhat » Enterprise Linux » Version: 8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Matching versions
Redhat » Openshift Container Platform » Version: 4.1
cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Matching versions
Libpod Project » Libpod » Version: N/A
cpe:2.3:a:libpod_project:libpod:-:*:*:*:*:*:*:*
Matching versions
Buildah Project » Buildah » Version: N/A
cpe:2.3:a:buildah_project:buildah:-:*:*:*:*:*:*:*
Matching versions
Skopeo Project » Skopeo » Version: N/A
cpe:2.3:a:skopeo_project:skopeo:-:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2019-10214

Top countries where our scanners detected CVE-2019-10214

Top open port discovered on systems with this issue 53

IPs affected by CVE-2019-10214 61,437

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2019-10214!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2019-10214

EPSS FAQ

0.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 46 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-10214

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
6.4	MEDIUM	CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N	1.2	5.2	Red Hat, Inc.
Attack Vector: Adjacent Network Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: None
5.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2019-10214

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Assigned by:
- nvd@nist.gov (Primary)
- secalert@redhat.com (Secondary)

References for CVE-2019-10214

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html

[security-announce] openSUSE-SU-2020:0554-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00035.html

[security-announce] openSUSE-SU-2020:0377-1: moderate: Security update f
Mailing List;Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10214

1732508 – (CVE-2019-10214) CVE-2019-10214 containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure
Issue Tracking;Patch;Vendor Advisory