The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4222 advisory.

  - An information disclosure flaw was found in Buildah, when building containers using chroot isolation.
    Running processes in container builds (e.g. Dockerfile RUN commands) can access environment variables from     parent and grandparent processes. When run in a container in a CI/CD environment, environment variables     may include sensitive information that was shared with the container in order to be used only by Buildah     itself (e.g. container registry credentials). (CVE-2021-3602)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 8 : container-tools:3.0 (ALSA-2021:4222)

medium Nessus Plugin ID 158851

No changelogs found