It has been found that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/redhat-sso-7 container. Original bug: https://bugzilla.redhat.com/show_bug.cgi?id=1791534
Acknowledgments: Name: Joseph LaMagna-Reiter (SPR Inc.)
This issue has been addressed in the following products: Red Hat Single Sign-On Via RHSA-2020:5533 https://access.redhat.com/errata/RHSA-2020:5533
This issue has been addressed in the following products: RHEL-8 based Middleware Containers Via RHSA-2020:5529 https://access.redhat.com/errata/RHSA-2020:5529
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2020-10695