It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/mysql-apb.
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openshift_container_platform | Redhat | 3.11 (including) | 3.11 (including) |
| Openshift_container_platform | Redhat | 4.1 (including) | 4.1 (including) |
| Openshift_container_platform | Redhat | 4.2 (including) | 4.2 (including) |
| Openshift_container_platform | Redhat | 4.3 (including) | 4.3 (including) |
| Red Hat OpenShift Container Platform 3.11 | RedHat | openshift3/mysql-apb:v3.11.188-4 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/apb-base:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/mariadb-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/mediawiki:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/mediawiki-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/mysql-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/postgres-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.1 | RedHat | openshift4/postgresql-apb:v4.1.37-202003021622 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/apb-base:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mariadb-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mediawiki-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/mysql-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/postgres-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.2 | RedHat | openshift4/postgresql-apb:v4.2.21-202002240343 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/apb-base:v4.3.5-202003020549 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/mariadb-apb:v4.3.5-202003020549 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/mysql-apb:v4.3.5-202003020549 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/postgres-apb:v4.3.5-202003020549 | * |
| Red Hat OpenShift Container Platform 4.3 | RedHat | openshift4/postgresql-apb:v4.3.5-202003020549 | * |