Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to elevated system privileges in the Red Hat Build of OpenJDK (CVE-2021-20264)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to elevated system privileges in the Red Hat Build of OpenJDK , caused by an insecure modification flaw in the /etc/passwd file CVE-2021-20264. The Red Hat Build of OpenJDK is included as part of the Base OS use...

CVE-2021-20264

creationtimestamp| type| source ---|---|--- 2021-10-06 20:32:07+00:00| seen| https://t.me/cibsecurity/30069...

CVE-2021-20264

CVE-2021-20264 is an in-container openjdk vulnerability where a local attacker with container access can modify /etc/passwd and escalate privileges. The issue affects Red Hat Build of OpenJDK in OpenJDK 1.8–11 deployments used by multiple products. As stated, exploitation is local and requires au...

Moderate: Red Hat Security Advisory: Red Hat Build of OpenJDK 11 (container images) release and security update

The Red Hat Build of OpenJDK 11 container images is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Moderate: Red Hat Security Advisory: Red Hat Build of OpenJDK 1.8 (container images) release and security update

The Red Hat Build of OpenJDK 8 container images is now available from the Red Hat Container Catalog. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...