Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/07 9:31 p.m.11 views

GHSA-856V-8QM2-9WJV operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, usersetup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used...

5.2CVSS6.5AI score0.0022EPSS
SaveExploits0References29
Rows per page
Query Builder