CVE-2021-20264: High severity openjdk 8 vulnerability
An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Other sources
It has been found that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to openjdk containers (ubi8/openjdk-8, ubi8/openjdk-11, openjdk/openjdk-11-rhel7, redhat-openjdk-18/openjdk18-openshift)
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this insecure modification flaw in the /etc/passwd file?
The vulnerability ID is CVE-2021-20264.
What is the severity of CVE-2021-20264?
The severity of CVE-2021-20264 is high with a score of 7.8.
Which software versions are affected by CVE-2021-20264?
The openjdk-1.8 and openjdk-11 containers are affected by CVE-2021-20264.
How can an attacker exploit this vulnerability?
An attacker with access to the container can modify the /etc/passwd file and escalate their privileges.
Are there any remediation steps available for CVE-2021-20264?
Yes, you can refer to the official Red Hat security advisories for remediation steps: [RHSA-2021:0946](https://access.redhat.com/errata/RHSA-2021:0946) and [RHSA-2021:0945](https://access.redhat.com/errata/RHSA-2021:0945).