CVE-2019-19354

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

CVE-2019-19354

The CVE concerns an insecure modification vulnerability in /etc/passwd within operator-framework/hadoop as shipped with Red Hat OpenShift 4. An attacker with container access could modify /etc/passwd and escalate privileges due to incorrect file privileges. Public advisories (RHSA-2020:1938) indi...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.4.3 hadoop-container security update

An update for hadoop-container is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...