CVE-2020-1704

2020-02-1717:15:14

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

JSON

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

CPENameOperatorVersion
istioeq0.6.0
istioeq0.5.0
istioeq1.0.1
istioeq1.0.0-snapshot.2
istioeq1.0.2
istioeq1.0.0
istioeq1.0.0-snapshot.0
istioeq0.3.0
istioeq1.0.5
istioeq1.0.7