Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2025-6032

Podman: podman missing tls verification

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

podman

Default version status: unaffected

  • 4.8.0 to < 5.5.2affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 6:5.4.0-12.el10_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 8100020250625105344.afee755d to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 5:5.4.0-12.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

Default version status: affected

  • 4:4.9.4-18.el9_4.2 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.16

Default version status: affected

  • 4:4.9.4-14.rhaos4.16.el8 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.16

Default version status: affected

  • 416.94.202507222002-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.17

Default version status: affected

  • 5:5.2.2-8.rhaos4.17.el8 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.17

Default version status: affected

  • 417.94.202507132309-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 418.94.202507221927-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 5:5.2.2-9.rhaos4.18.el9 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.19

Default version status: affected

  • 4.19.9.6.202507152218-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.19

Default version status: affected

  • 5:5.4.0-6.rhaos4.19.el9 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.20

Default version status: affected

  • 4.20.9.6.202509251656-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

References