CVE-2022-4122 - AskarLabs CVE Database

CVE-2022-4122

Vendor N/A

Product podman

Weakness CWE-59

Published December 8, 2022

Last update April 22, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.

Key dates

02Disclosure timeline

December 8, 2022 CVE published

April 22, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-4122 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/59.html

Related vulnerabilities

04Related CVE

CVE-2023-28972 Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability CVE-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation CVE-2026-42496 Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory CVE-2020-3237 Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability