CVE-2019-10214: Insufficiently Protected Credentials in containers/image
Summary
CVE-2019-10214: containers/image library Insufficiently Protects Credentials. Affects github.com/containers/image versions < 3.0.0. Fixed in 3.0.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The containers/image library is utilized by container tools such as Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8, as well as CRI-O in OpenShift Container Platform. This library is responsible for managing container images and interacting with container registries. It is implemented in Go and can be accessed via the 'github.com/containers/image' package.
Vulnerability Detail
The vulnerability identified as CVE-2019-10214 involves insufficiently protected credentials within the containers/image library. Specifically, the library does not enforce TLS connections to the container registry authorization service. This flaw opens up the possibility of a Man-in-the-Middle (MitM) attack, where an attacker can intercept network traffic and steal login credentials or bearer tokens. The impact of this vulnerability could be significant, as unauthorized access to container registries can lead to the compromise of sensitive data and the execution of unauthorized actions.
How To Fix
Latest published version: v3.0.2+incompatible as of 23 Oct 2026
go get github.com/containers/image@v3.0.2+incompatibleUpgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
3.0.0
This is the first release that contains the fix.
go get github.com/containers/image@v3.0.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, as a general security practice, it is advisable to ensure that container registries are accessed over secure connections (HTTPS) and to regularly monitor network traffic for any suspicious activity.
Conclusion
In conclusion, the CVE-2019-10214 vulnerability in the containers/image library exposes credentials to potential theft through a lack of TLS enforcement. To mitigate this vulnerability, it is crucial to update the library to version 3.0.0 or later and ensure secure connections to container registries. Regular monitoring of network traffic is also recommended to detect any suspicious activity. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for github.com/containers/image →
FAQ
The vulnerability allows an attacker to perform a Man-in-the-Middle attack and steal login credentials or bearer tokens. This can lead to unauthorized access to container registries and potential compromise of sensitive data.
The vulnerability affects container tools such as Podman, Buildah, Skopeo, and CRI-O, which utilize the containers/image library.
Yes, updating the containers/image library to version 3.0.0 or later resolves this vulnerability.
While there are no specific mitigations mentioned, it is recommended to ensure secure connections (HTTPS) to container registries and monitor network traffic for any suspicious activity.
You can find more information about this vulnerability in the GitHub Advisory Database at the following link: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-85p9-j7c9-v4gr/GHSA-85p9-j7c9-v4gr.json
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/containers/image.
