openshift/mediawiki: /etc/passwd is given incorrect privileges
Published Mar 20, 2020
7.8
HIGHCVSS 3.1
EPSS 0.27%
Description
A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/mediawiki. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Affected products
- Vendor n/a Product Openshift/mediawiki Defaultn/a
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||
|---|---|---|---|---|---|---|
| n/a | Openshift/mediawiki | n/a |
|
No data.
Red Hat OpenShift Container Platform 3.11
openshift3/mediawiki:v3.11.188-2
Fixed · RHSA-2020:0799
Red Hat OpenShift Container Platform 4.1
openshift4/apb-base:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/mariadb-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/mediawiki-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/mediawiki:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/mysql-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/postgres-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1
openshift4/postgresql-apb:v4.1.37-202003021622
Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.2
openshift4/mediawiki:v4.2.24-202003161048
Fixed · RHSA-2020:0830
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat OpenShift Container Platform 3.11 | openshift3/mediawiki:v3.11.188-2 | Fixed | RHSA-2020:0799 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/apb-base:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/mariadb-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/mediawiki-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/mediawiki:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/mysql-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/postgres-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.1 | openshift4/postgresql-apb:v4.1.37-202003021622 | Fixed | RHSA-2020:0694 |
| Red Hat OpenShift Container Platform 4.2 | openshift4/mediawiki:v4.2.24-202003161048 | Fixed | RHSA-2020:0830 |
No package ranges for this CVE.
Remediation
Red Hat statement
By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.
References (6)
- https://access.redhat.com/security/cve/CVE-2020-1709 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1793297 Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1709 Issue TrackingVendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12564 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-1709
- https://www.cve.org/CVERecord?id=CVE-2020-1709
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2020-1709 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1793297 | Issue Tracking | |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1709 | Issue TrackingVendor Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12564 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2020-1709 | ||
| https://www.cve.org/CVERecord?id=CVE-2020-1709 |
Change history (0)
No recorded changes yet.