PT-2020-14908 · Red Hat · Openshift/Mediawiki

Joseph Lamagna-Reiter + 1 · Published 2020-03-20 · Updated 2023-02-12 · CVE-2020-1709

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions openshift/mediawiki versions prior to 4.3.0

Description A vulnerability was found in the openshift/mediawiki, where an insecure modification vulnerability in the /etc/passwd file allows an attacker with access to the container to modify /etc/passwd and escalate their privileges. The attacker can use this flaw to gain elevated access.

Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the /etc/passwd file to minimize the risk of exploitation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-1709

Affected Products

Openshift/Mediawiki

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-1709 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1709 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1709 · Vendor Advisory
• https://t.me/cvenotify/1946 · Telegram Post