An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Weakness
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openshift | Redhat | * | 3.11.188-4 (excluding) |
| Openshift | Redhat | 4.0.0 (including) | 4.1.37 (excluding) |
| Openshift | Redhat | 4.2.0 (including) | 4.2.21 (excluding) |
| Openshift | Redhat | 4.3.0 (including) | 4.3.5 (excluding) |
| Red Hat OpenShift Container Platform 3.11 | RedHat | openshift3/mariadb-apb:v3.11.188-4 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/apb-base:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/mariadb-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/mediawiki:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/mediawiki-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/mysql-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/postgres-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/postgresql-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/apb-base:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mariadb-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mediawiki-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mysql-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/postgres-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/postgresql-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/apb-base:v4.3.5-202003020549 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/mariadb-apb:v4.3.5-202003020549 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/mysql-apb:v4.3.5-202003020549 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/postgres-apb:v4.3.5-202003020549 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/postgresql-apb:v4.3.5-202003020549 | * |