← CVE Intelligence

CVE-2025-6032

Podman: podman missing tls verification PUBLISHED

Description (CNA)

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 4.8.0 before 5.5.2
Red Hat / Red Hat Enterprise Linux 10unaffected 6:5.4.0-12.el10_0 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020250625105344.afee755d before *
Red Hat / Red Hat Enterprise Linux 9unaffected 5:5.4.0-12.el9_6 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 4:4.9.4-18.el9_4.2 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 4:4.9.4-14.rhaos4.16.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 416.94.202507222002-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 5:5.2.2-8.rhaos4.17.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 417.94.202507132309-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.18unaffected 418.94.202507221927-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.18unaffected 5:5.2.2-9.rhaos4.18.el9 before *
Red Hat / Red Hat OpenShift Container Platform 4.19unaffected 4.19.9.6.202507152218-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.19unaffected 5:5.4.0-6.rhaos4.19.el9 before *
Red Hat / Red Hat OpenShift Container Platform 4.20unaffected 4.20.9.6.202509251656-0 before *
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-295

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.