Red Hat Security AdvisoryRHSA-2020:0617
OpenShift Container Platform 4.2.21 security update
Released 2020-03-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.2 openshift4/apb-base, openshift4/mariadb-apb, openshift4/mediawiki-apb +3
Fixes 5 records
Priority LOW 34
A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mediawiki-apb.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2020-03-20 · Fixed CWE-266
Priority LOW 31
It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users oth…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0028 · Published 2020-02-07 · Fixed CWE-266
Priority LOW 30
A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/postgresql-apb.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00258 · Published 2020-03-20 · Fixed CWE-732
Priority LOW 30
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00258 · Published 2020-04-02 · Fixed CWE-266
Priority LOW 30
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 .
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00258 · Published 2020-04-02 · Fixed CWE-266