Description

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

INFO

Published Date :

2025-06-24T13:50:47.955Z

Last Modified :

2025-11-29T00:08:30.477Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2025-6032 vulnerability.

Vendors Products
Redhat
  • Enterprise Linux
  • Openshift
  • Rhel Eus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-6032.

URL Resource
https://access.redhat.com/errata/RHSA-2025:10295 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:10549 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:10550 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:10551 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:10668 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:11359 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:11363 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:11677 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:11681 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:15397 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:9726 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:9751 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:9766 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2025-6032 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2372501 cve-icon cve-icon
https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3 cve-icon cve-icon
https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-6032 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-6032 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact