CVE-2025-7195

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, usersetup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used...

Red Hat File Integrity Operator 安全漏洞

Red Hat File Integrity Operator is a file integrity checking software from Red Hat. A security vulnerability exists in Red Hat File Integrity Operator versions prior to 0.15.2, which stems from a usersetup script that improperly modifies the permissions of the /etc/passwd file, which could result...