PT-2020-14903

Name of the Vulnerable Software and Affected Versions OpenShift ServiceMesh maistra versions prior to 1.0.8 Description A flaw was discovered in the /etc/passwd file, allowing an attacker with access to the container to modify it and potentially escalate their privileges. This issue affects the...

CVE-2020-1704: Incorrect Privilege Assignment

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh maistra before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their...

Unspecified Vulnerability in OpServices OpMon (CNVD-2020-14223)

OpServices OpMon is an IT infrastructure monitoring software from Brazil. A security vulnerability exists in OpServices OpMon. An attacker can exploit the vulnerability to read server files e.g. /etc/passwd...

CVE-2020-1708

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit th...

CVE-2020-1708

CVE-2020-1708 affects OpenShift Container Platform/OpenShift Enterprise where multiple containers (notably openshift/mysql-apb) expose /etc/passwd to non-root modification. Root cause is that /etc/passwd privileges were set incorrectly, enabling privilege escalation for an attacker with local con...

CVE-2020-1708

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit th...

PT-2020-14907 · Red Hat · Openshift Enterprise

Name of the Vulnerable Software and Affected Versions: openshift-enterprise versions 3.11 through 4.3 Description: A security issue has been identified where multiple containers in openshift-enterprise modify the permissions of /etc/passwd, allowing users other than root to modify it. An attacker...

CVE-2020-1708: Incorrect Privilege Assignment

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit th...

Linux: Read /etc/passwd (KB)

The password file stores information about users such like username, UID, GID, etc. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Linux: Home directory for root user

The password file stores information about users such like username, UID, GID, etc. This script tests, if home directories for users are located in /home. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/...

CVE-2020-8009

AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file...

CVE-2020-8009

AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file...

Directory traversal

AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file...

CVE-2020-8009

AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file...

CVE-2020-8009

AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file...

PT-2020-19914

Name of the Vulnerable Software and Affected Versions AVB MOTU devices through 2020-01-22 Description The issue allows directory traversal, as demonstrated by reading the /etc/passwd file, via the /.. endpoint. Recommendations For AVB MOTU devices through 2020-01-22, consider restricting access t...

CVE-2020-8009: Improper Limitation of a Pathname to a Restricted Directory

AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file...

Unspecified Vulnerability in Red Hat OpenShift Container Platform

Red Hat OpenShift Container Platform is a suite of application platforms from Red Hat that enable organizations to develop, deploy and manage existing container-based applications across physical, virtual and public cloud infrastructures. The Red Hat OpenShift Container Platform has a security...

CVE-2019-19355

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

CVE-2019-19353

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...