Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q483-wcf8-3hjc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

EPSS

Процентиль: 30%
0.0011
Низкий

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 7
redhat
около 6 лет назад

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

CVSS3: 7
nvd
почти 6 лет назад

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

EPSS

Процентиль: 30%
0.0011
Низкий

Дефекты

CWE-732