Red Hat Security Advisory

RHSA-2020:4381

openstack-selinux security update

Released 2020-10-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 16.1 openstack-selinux-0.8.24-1.20200914163011.26243bf.el8ost

Fixes 1 record

TI-2020-01637 CVE-2020-1690 · GHSA-2364-qg82-xg35

Improper authorization in openstack-selinux

LOW 28

An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00221 Published 2021-06-07 Partial fix CWE-285