{"id":"EUVD-2025-19013","revision":"67c9c6e990c34b3c8d4e8563ef299d2d","records":[{"revision":"67c9c6e990c34b3c8d4e8563ef299d2d","observedAt":"2026-11-07T02:45:28.96+00:00","statement":{"source":"euvd","id":"EUVD-2025-19013","aliases":["CVE-2025-6032","GHSA-65gg-3w2w-hr4h"],"title":"A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.","description":"A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","score":8.3,"severity":null}],"references":["https://access.redhat.com/errata/RHSA-2025:10295","https://access.redhat.com/errata/RHSA-2025:10549","https://access.redhat.com/errata/RHSA-2025:10550","https://access.redhat.com/errata/RHSA-2025:10551","https://access.redhat.com/errata/RHSA-2025:10668","https://access.redhat.com/errata/RHSA-2025:11359","https://access.redhat.com/errata/RHSA-2025:11363","https://access.redhat.com/errata/RHSA-2025:11677","https://access.redhat.com/errata/RHSA-2025:11681","https://access.redhat.com/errata/RHSA-2025:15397","https://access.redhat.com/errata/RHSA-2025:9726","https://access.redhat.com/errata/RHSA-2025:9751","https://access.redhat.com/errata/RHSA-2025:9766","https://access.redhat.com/security/cve/CVE-2025-6032","https://bugzilla.redhat.com/show_bug.cgi?id=2372501","https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3","https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19013","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jun 24, 2025, 1:50:47 PM","dateUpdated":"Oct 12, 2026, 7:53:07 PM"},"relatedAdvisories":[{"id":"RHSA-2025:11677","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.21 bug fix and security update","vulnerabilityIds":["CVE-2024-45339","CVE-2025-6032","CVE-2025-48060"]},{"id":"RHSA-2025:10295","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.35 packages and security update","vulnerabilityIds":["CVE-2025-6032","CVE-2025-22871"]},{"id":"RHSA-2025:11363","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.5 bug fix and security update","vulnerabilityIds":["CVE-2025-6032","CVE-2025-48060"]},{"id":"SUSE-SU-2026:22451-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"RHSA-2025:15397","title":"Red Hat Security Advisory: OpenShift Container Platform 4.20.0 bug fix and security update","vulnerabilityIds":["CVE-2025-5914","CVE-2025-5994","CVE-2025-6032","CVE-2025-6965","CVE-2025-49794","CVE-2025-49796"]},{"id":"msrc_CVE-2025-6032","title":"Podman: podman missing tls verification","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2026:22516-1","title":"Security update for podman","vulnerabilityIds":["CVE-2024-6104","CVE-2025-22869","CVE-2025-27144","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"SUSE-SU-2026:20641-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"RHSA-2025:9766","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.43 packages and security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:20805-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:02806-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:10550","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:02807-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]},{"id":"WID-SEC-W-2025-1389","title":"Podman: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","vulnerabilityIds":["CVE-2025-6032"]},{"id":"WID-SEC-W-2025-2043","title":"IBM QRadar SIEM: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-47670","CVE-2023-49083","CVE-2024-56644","CVE-2025-21727","CVE-2025-21759","CVE-2025-22058","CVE-2025-22097","CVE-2025-37914","CVE-2025-38085","CVE-2025-38159","CVE-2025-38200","CVE-2025-38250","CVE-2025-38380","CVE-2025-5914","CVE-2025-5994","CVE-2025-6020","CVE-2025-6032","CVE-2025-8194","CVE-2025-0164"]},{"id":"openSUSE-SU-2026:20305-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"openSUSE-SU-2025:15405-1","title":"govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media","vulnerabilityIds":["CVE-2024-44905","CVE-2024-44906","CVE-2024-56731","CVE-2025-0928","CVE-2025-1088","CVE-2025-30086","CVE-2025-32019","CVE-2025-3227","CVE-2025-3228","CVE-2025-3415","CVE-2025-4563","CVE-2025-4656","CVE-2025-46702","CVE-2025-4674","CVE-2025-47281","CVE-2025-47871","CVE-2025-47943","CVE-2025-4922","CVE-2025-4981","CVE-2025-49825","CVE-2025-5030","CVE-2025-51471","CVE-2025-52477","CVE-2025-52889","CVE-2025-52890","CVE-2025-52893","CVE-2025-52894","CVE-2025-52900","CVE-2025-52901","CVE-2025-52902","CVE-2025-52903","CVE-2025-52904","CVE-2025-52995","CVE-2025-52996","CVE-2025-52997","CVE-2025-53512","CVE-2025-53513","CVE-2025-53547","CVE-2025-53632","CVE-2025-53633","CVE-2025-53634","CVE-2025-53826","CVE-2025-53893","CVE-2025-53945","CVE-2025-54059","CVE-2025-54379","CVE-2025-5689","CVE-2025-5981","CVE-2025-6023","CVE-2025-6032","CVE-2025-6224","CVE-2025-6226","CVE-2025-6227","CVE-2025-6233","CVE-2025-6264","CVE-2025-6624"]},{"id":"RHSA-2025:10668","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:9751","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.2 packages and security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:20869-1","title":"Security update for podman","vulnerabilityIds":["CVE-2024-6104","CVE-2025-22869","CVE-2025-27144","CVE-2025-6032","CVE-2025-9566"]},{"id":"SUSE-SU-2025:20692-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:11359","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.36 bug fix and security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2026:20626-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"openSUSE-SU-2026:21244-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"RHSA-2025:11681","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.45 bug fix and security update","vulnerabilityIds":["CVE-2024-45339","CVE-2024-51744","CVE-2025-6032","CVE-2025-30204","CVE-2025-48060"]},{"id":"openSUSE-SU-2025:15262-1","title":"podman-5.5.2-1.1 on GA media","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:10551","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2026:24378-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39829","CVE-2026-39830","CVE-2026-42508","CVE-2026-55686","CVE-2026-57231"]},{"id":"RHSA-2025:10549","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:9726","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.19 packages and security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:02808-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-19013","identifiers":["EUVD-2025-19013","CVE-2025-6032","GHSA-65gg-3w2w-hr4h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}