Beveiligingsadvies

CVE-2025-3528

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-09 11:58:24
Laatst bijgewerkt 2026-02-27 16:29:37
Toegewezen door redhat
CVSS-score 8.2
Status PUBLISHED

Beschrijving

A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.