RHSA-2020:0830: Moderate: OpenShift Container Platform 4.2 openshift-enterprise-mediawiki-container security update

Published Mar 26, 2020

Updated

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or private cloud deployments.Security Fix(es): openshift/mediawiki: /etc/passwd is given incorrect privileges (CVE-2020-1709) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Container Platform

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenShift Container Platform to a version that resolves this vulnerability.
Fixed in 4.2.25

Event History

Mar 26, 2020

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:0830?

The severity of RHSA-2020:0830 is classified as moderate.

How do I fix RHSA-2020:0830?

To fix RHSA-2020:0830, you should update the openshift/mediawiki package to the latest version.

What specific vulnerability is addressed in RHSA-2020:0830?

RHSA-2020:0830 addresses a privilege issue with /etc/passwd as identified by CVE-2020-1709.

Which software is affected by RHSA-2020:0830?

RHSA-2020:0830 affects the Red Hat OpenShift Container Platform and its related mediawiki component.

Is there any additional risk associated with RHSA-2020:0830?

Exploiting the vulnerability in RHSA-2020:0830 could lead to unauthorized access or manipulation of user privileges.