CVE-2020-1708 — Incorrect Privilege Assignment in RED HAT Openshift Mysql-apb

CWE-266 — Incorrect Privilege AssignmentCWE-269 — Improper Privilege Management10 documents6 sources
Severity
7.0HIGHNVD
EPSS
0.1%
top 71.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
RED HAT Openshift Mysql-apbRedhat Openshift Container Platform
Timeline
PublishedFeb 7
Latest updateMay 24

Description

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/mysql-apb.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages1 packages

▶CVEListV5red_hat/openshift_mysql-apbfrom openshift-enterprise version 4.1 to, including 4.3, openshift-enterprise version 3.11+1

Also affects: Openshift Container Platform 3.11, 4.1, 4.2, 4.3

🔴Vulnerability Details

2
GHSA
GHSA-vfjr-r7c6-mq2h: It has been found in openshift-enterprise version 3↗2022-05-24
▶
CVEList
CVE-2020-1708: It has been found in openshift-enterprise version 3↗2020-02-07
▶

📋Vendor Advisories

1
Red Hat
openshift/mysql-apb: /etc/passwd is given incorrect privileges↗2020-01-21
▶

💬Community

5
Bugzilla
CVE-2020-1708 openshift/mysql-apb: /etc/passwd is given incorrect privileges↗2020-01-21
▶
Bugzilla
CVE-2018-12085 liblouis: Stack-based buffer overflow in compileTranslationTable.c↗2018-06-11
▶
Bugzilla
CVE-2018-11685 liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c↗2018-06-07
▶
Bugzilla
CVE-2018-11684 liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c↗2018-06-07
▶
Bugzilla
CVE-2018-11577 liblouis: Segmentation fault in logging.c:lou_logPrint()↗2018-06-05
▶
CVE-2020-1708 — Incorrect Privilege Assignment in RED | cvebase