Read the docs
Red Hat Security Advisory

RHSA-2020:0681

OpenShift Container Platform 4.3.5 security update

Released 2020-03-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2020-01654 CVE-2020-1708 · GHSA-vfjr-r7c6-mq2h

Improper privilege management in Red Hat openshift/mysql-apb

Priority LOW 31

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users oth…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0028 Published 2020-02-07 Fixed CWE-266
TI-2020-01653 CVE-2020-1707 · GHSA-4mj7-c2gw-2c45

Incorrect permission assignment in [UNKNOWN] openshift/postgresql-apb

Priority LOW 30

A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/postgresql-apb.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00258 Published 2020-03-20 Fixed CWE-732
TI-2019-13959 CVE-2019-19348 · GHSA-wmv5-6242-725f

Improper privilege management in openshift/apb-base

Priority LOW 30

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00258 Published 2020-04-02 Fixed CWE-266
TI-2019-13958 CVE-2019-19346 · GHSA-983g-8wfp-4rwm

Improper privilege management in openshift/mariadb-apb

Priority LOW 30

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 .

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00258 Published 2020-04-02 Fixed CWE-266