REDHAT-BUG-1793281: Medium severity Openshift presto-container vulnerability

Published Jan 21, 2020

Updated

It has been found that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/presto-container.

Original bug: https://bugzilla.redhat.com/showbug.cgi?id=1791534

Affected Software

1 affected component

Openshift presto-container

Event History

Jan 21, 2020

Data Sourced

via Red Hat·04:28 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1793281?

The severity of REDHAT-BUG-1793281 is critical as it allows unauthorized modification of /etc/passwd, leading to potential privilege escalation.

How do I fix REDHAT-BUG-1793281?

To fix REDHAT-BUG-1793281, ensure that proper permissions are set on /etc/passwd and update the affected OpenShift version to the latest patched release.

What are the potential impacts of REDHAT-BUG-1793281?

The potential impacts of REDHAT-BUG-1793281 include unauthorized user creation and privilege escalation, compromising the security of the affected containers.

Who is affected by REDHAT-BUG-1793281?

Users of OpenShift utilizing the presto-container are affected by REDHAT-BUG-1793281 due to improper permissions on the /etc/passwd file.

What kind of attacker can exploit REDHAT-BUG-1793281?

An attacker with access to a running container can exploit REDHAT-BUG-1793281 to modify /etc/passwd and escalate their privileges.