Red Hat Security Advisory

RHSA-2020:2369

Red Hat OpenShift Service Mesh openshift-istio-kiali-rhel7-operator-container security update

Released 2020-06-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Service Mesh 1.1 openshift-service-mesh/kiali-rhel7-operator

Fixes 1 record

TI-2020-01650 CVE-2020-1704 · GHSA-q483-wcf8-3hjc

Incorrect permission assignment in Red Hat openshift-service-mesh/kiali-rhel7-operator

LOW 34

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00275 Published 2020-02-17 Fixed in 1.0.8 CWE-266