CVE-2025-4953
BaseFortify
Publication date: 2025-09-16
Last updated on: 2025-12-11
Assigner: Red Hat, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| redhat | openshift_container_platform | 4.18.25 |
| redhat | openshift_container_platform | 4.16.49 |
| redhat | openshift_container_platform | 4.12.81 |
| redhat | podman | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-378 | Opening temporary files without appropriate measures or controls can leave the file, its contents and any function that it impacts vulnerable to attack. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Podman involves a flaw where data written to RUN --mount=type=bind mounts during a podman build is not discarded as expected. As a result, files created inside the container during the build process can appear in the temporary build context directory on the host system, making those files accessible outside the container.
How can this vulnerability impact me? :
The vulnerability can lead to sensitive or unintended files created within a container during build processes being exposed on the host system. This exposure could result in unauthorized access to confidential data or leakage of sensitive information, potentially compromising system security and privacy.