Postmortem: How a Vulnerability in Podman 5.0 Let Attackers Access Our Private Container Registry

Postmortem: How a Vulnerability in Podman 5.0 Let Attackers Access Our Private Container Registry Executive Summary On March 12, 2024, our security team detected unauthorized access to our private container registry, traced to a critical vulnerability in Podman 5.0's registry authentication module. This postmortem details the incident timeline, root cause, impact, and remediation actions taken. Incident Timeline 2024-03-12 09:15 UTC: Security monitoring alerts trigger for anomalous pull requests