A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/template-service-broker-operator. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Template_service_broker_operator | Redhat | 4.0.0 (including) | 4.3.0 (excluding) |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/apb-base:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/apb-tools:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mariadb-apb:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mediawiki:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mediawiki-apb:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mysql-apb:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-ansible-operator:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-cluster-capacity:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-cluster-logging-operator:v4.2.27-202003310105 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-cluster-nfd-operator:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-csi-external-attacher:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-csi-external-provisioner-rhel7:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-csi-livenessprobe:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-descheduler:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-descheduler-operator:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-efs-provisioner-rhel7:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-egress-dns-proxy:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-egress-http-proxy:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-egress-router:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-elasticsearch-operator:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-ghostunnel:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-jenkins-agent-base:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-local-storage-diskmaker:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-local-storage-operator:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-logging-curator5:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-logging-eventrouter:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-logging-fluentd:v4.2.27-202003310105 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-metering-ansible-operator:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-metering-hadoop:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-metering-hive:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-metering-presto:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-metering-reporting-operator:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-node-feature-discovery:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-sriov-cni:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-sriov-dp-admission-controller:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-sriov-network-config-daemon:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-sriov-network-device-plugin:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/ose-sriov-network-operator:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/postgres-apb:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/postgresql-apb:v4.2.27-202003301126 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/ose-template-service-broker-operator:v4.3.7-202003161611 | * |