Security Advisory

CVE-2020-1704

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-02-17 16:38:06
Last updated 2024-08-04 06:46:30
Assigner redhat
State PUBLISHED

Description

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.