vulnerability

Red Hat OpenShift: CVE-2020-1707: openshift/postgresql-apb: /etc/passwd is given incorrect privileges

Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
Mar 5, 2020
Added
Mar 5, 2020
Modified
Aug 11, 2025

Description

A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/postgresql-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Solution

linuxrpm-upgrade-openshift-enterprise
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.