RHSA-2020:0799: Moderate: OpenShift Container Platform 3.11 openshift-enterprise-mediawiki-container security update

Published Mar 20, 2020

Updated

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Security Fix(es): openshift/mediawiki: /etc/passwd is given incorrect privileges (CVE-2020-1709) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Container Platform=3.11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenShift Container Platform to a version that resolves this vulnerability.
Fixed in 3.11.188

Event History

Mar 20, 2020

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:0799?

The severity of RHSA-2020:0799 is classified as moderate.

How do I fix RHSA-2020:0799?

To fix RHSA-2020:0799, you can update the affected OpenShift Container Platform packages to the latest versions provided by Red Hat.

What vulnerability does RHSA-2020:0799 address?

RHSA-2020:0799 addresses a vulnerability related to incorrect privileges granted to the /etc/passwd file in the openshift/mediawiki image.

Which application is affected by RHSA-2020:0799?

RHSA-2020:0799 affects the Red Hat OpenShift Container Platform, specifically the openshift/mediawiki component.

What is CVE-2020-1709 related to RHSA-2020:0799?

CVE-2020-1709 refers to the specific vulnerability concerning incorrect file permissions of the /etc/passwd file in the context of RHSA-2020:0799.