openshift/mediawiki-apb: /etc/passwd is given incorrect privileges
Published Mar 20, 2020
7.8
HIGHCVSS 3.1
EPSS 0.27%
Description
A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mediawiki-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Affected products
- Vendor n/a Product Openshift/mediawiki-Apb Defaultn/a
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||
|---|---|---|---|---|---|---|
| n/a | Openshift/mediawiki-Apb | n/a |
|
No data.
Red Hat OpenShift Container Platform 3.11
openshift3/mediawiki-apb:v3.11.188-4
Fixed · RHSA-2020:0798
Red Hat OpenShift Container Platform 4.1
openshift4/apb-base:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/mariadb-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/mediawiki-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/mediawiki:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/mysql-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/postgres-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/postgresql-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.2
openshift4/apb-base:v4.2.21-202002240343
Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2
openshift4/mariadb-apb:v4.2.21-202002240343
Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2
openshift4/mediawiki-apb:v4.2.21-202002240343
Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2
openshift4/mysql-apb:v4.2.21-202002240343
Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2
openshift4/postgres-apb:v4.2.21-202002240343
Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2
openshift4/postgresql-apb:v4.2.21-202002240343
Fixed · RHSA-2020:0617
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat OpenShift Container Platform 3.11 | openshift3/mediawiki-apb:v3.11.188-4 | Fixed | RHSA-2020:0798 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/apb-base:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/mariadb-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/mediawiki-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/mediawiki:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/mysql-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/postgres-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/postgresql-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.2 | openshift4/apb-base:v4.2.21-202002240343 | Fixed | RHSA-2020:0617 |
| Red Hat OpenShift Container Platform 4.2 | openshift4/mariadb-apb:v4.2.21-202002240343 | Fixed | RHSA-2020:0617 |
| Red Hat OpenShift Container Platform 4.2 | openshift4/mediawiki-apb:v4.2.21-202002240343 | Fixed | RHSA-2020:0617 |
| Red Hat OpenShift Container Platform 4.2 | openshift4/mysql-apb:v4.2.21-202002240343 | Fixed | RHSA-2020:0617 |
| Red Hat OpenShift Container Platform 4.2 | openshift4/postgres-apb:v4.2.21-202002240343 | Fixed | RHSA-2020:0617 |
| Red Hat OpenShift Container Platform 4.2 | openshift4/postgresql-apb:v4.2.21-202002240343 | Fixed | RHSA-2020:0617 |
No package ranges for this CVE.
Remediation
Red Hat statement
By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.
References (6)
- https://access.redhat.com/security/cve/CVE-2019-19345 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1793296 Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19345 x_refsource_CONFIRMIssue TrackingVendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8966 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-19345
- https://www.cve.org/CVERecord?id=CVE-2019-19345
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2019-19345 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1793296 | Issue Tracking | |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19345 | x_refsource_CONFIRMIssue TrackingVendor Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8966 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2019-19345 | ||
| https://www.cve.org/CVERecord?id=CVE-2019-19345 |
Change history (0)
No recorded changes yet.