vulnerability

Red Hat OpenShift: CVE-2020-1705: openshift/template-service-broker-operator: /etc/passwd is given incorrect privileges

Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
Mar 19, 2020
Added
Mar 25, 2020
Modified
Aug 11, 2025

Description

A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/template-service-broker-operator. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Solution

linuxrpm-upgrade-openshift-enterprise-template-service-broker
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.