An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges.
Weakness
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Single_sign-on | Redhat | * | 7.4.4 (excluding) |
| RHEL-8 based Middleware Containers | RedHat | rh-sso-7/sso74-openshift-rhel8:7.4-12 | * |
| Text-Only RHSSO | RedHat | redhat-sso-7-openshift-containers | * |