PT-2020-14907 · Red Hat · Openshift Enterprise

Published 2020-02-07 · Updated 2023-02-12 · CVE-2020-1708

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions openshift-enterprise versions 3.11 through 4.3

Description A security issue has been identified where multiple containers in openshift-enterprise modify the permissions of /etc/passwd, allowing users other than root to modify it. An attacker with access to the running container can exploit this to add a user and escalate their privileges.

Recommendations For openshift-enterprise versions 3.11 through 4.3, consider restricting access to the containers that modify the /etc/passwd file until a fix is available. As a temporary workaround, restrict modifications to the /etc/passwd file to prevent privilege escalation. Avoid using the affected containers in openshift-enterprise until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Privilege Assignment

Improper Privilege Management

Weakness Enumeration

CWE-266

CWE-269

Related Identifiers

CVE-2020-1708

Affected Products

Openshift Enterprise

References · 6

• https://access.redhat.com/errata/RHSA-2020:0694 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1708 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1708 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2020:0617 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1708 · Security Note
• https://access.redhat.com/errata/RHSA-2020:0681 · Vendor Advisory