Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2019-19351
Vulnerability from cvelistv5
Published
2020-03-18 16:33
Modified
2024-08-05 02:16
Severity ?
EPSS score ?
Summary
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.
References
▼ | URL | Tags | |
---|---|---|---|
secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351 | Issue Tracking, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351 | Issue Tracking, Vendor Advisory |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T02:16:47.395Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "openshift", "vendor": "Red Hat", "versions": [ { "status": "affected", "version": "Openshift 4 and 3.11" } ] } ], "descriptions": [ { "lang": "en", "value": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-266", "description": "CWE-266", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2020-03-18T16:33:50", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351" } ] } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2019-19351", "datePublished": "2020-03-18T16:33:50", "dateReserved": "2019-11-27T00:00:00", "dateUpdated": "2024-08-05T02:16:47.395Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2019-19351\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2020-03-18T17:15:11.713\",\"lastModified\":\"2024-11-21T04:34:37.907\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.\"},{\"lang\":\"es\",\"value\":\"Se detect\u00f3 una vulnerabilidad de modificaci\u00f3n no segura en el archivo /etc/passwd en el contenedor openshift/jenkins. Un atacante con acceso al contenedor podr\u00eda usar este fallo para modificar el archivo /etc/passwd y escalar sus privilegios. Este CVE es espec\u00edfico de openshift/jenkins-slave-base-rhel7-container como es incluido en Openshift versiones 4 y 3.11.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":4.4,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.4,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-266\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-269\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift:3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"64797939-6676-40DC-A81A-3FD0C45A8047\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F7E2F04-474D-4196-9CE8-242642990A16\"}]}]}],\"references\":[{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]}]}}" } }
RHSA-2020:0526
Vulnerability from csaf_redhat
Published
2020-02-27 12:02
Modified
2024-11-22 14:29
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.2.20 jenkins-slave-base-rhel7-container security update
Notes
Topic
An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.2.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.2.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0526", "url": "https://access.redhat.com/errata/RHSA-2020:0526" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0526.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.2.20 jenkins-slave-base-rhel7-container security update", "tracking": { "current_release_date": "2024-11-22T14:29:56+00:00", "generator": { "date": "2024-11-22T14:29:56+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:0526", "initial_release_date": "2020-02-27T12:02:56+00:00", "revision_history": [ { "date": "2020-02-27T12:02:56+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-02-27T12:02:56+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T14:29:56+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.2", "product": { "name": "Red Hat OpenShift Container Platform 4.2", "product_id": "7Server-RH7-RHOSE-4.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.2::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "product_id": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.2.20-202002171604" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "product_id": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.2.20-202002171604" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x as a component of Red Hat OpenShift Container Platform 4.2", "product_id": "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "relates_to_product_reference": "7Server-RH7-RHOSE-4.2" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64 as a component of Red Hat OpenShift Container Platform 4.2", "product_id": "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.2" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Joseph LaMagna-Reiter" ], "organization": "SPR Inc." } ], "cve": "CVE-2019-19351", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793282" } ], "notes": [ { "category": "description", "text": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "openshift/jenkins: /etc/passwd is given incorrect privileges", "title": "Vulnerability summary" }, { "category": "other", "text": "By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "category": "external", "summary": "RHBZ#1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "external", "summary": "RHSB-4859371", "url": "https://access.redhat.com/articles/4859371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19351", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-02-27T12:02:56+00:00", "details": "For OpenShift Container Platform 4.2 see the following documentation, which\nwill be updated shortly for release 4.2.20, for important instructions on\nhow to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.2/updating/updating-cluster-cli.html.", "product_ids": [ "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0526" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openshift/jenkins: /etc/passwd is given incorrect privileges" } ] }
RHSA-2020:0803
Vulnerability from csaf_redhat
Published
2020-03-20 00:29
Modified
2024-11-22 14:30
Summary
Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-slave-base-rhel7-container security update
Notes
Topic
An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 3.11.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* openshift/jenkins: /etc/passwd is given incorrect privileges (CVE-2019-19351)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 3.11.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* openshift/jenkins: /etc/passwd is given incorrect privileges (CVE-2019-19351)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0803", "url": "https://access.redhat.com/errata/RHSA-2020:0803" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0803.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-slave-base-rhel7-container security update", "tracking": { "current_release_date": "2024-11-22T14:30:05+00:00", "generator": { "date": "2024-11-22T14:30:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:0803", "initial_release_date": "2020-03-20T00:29:28+00:00", "revision_history": [ { "date": "2020-03-20T00:29:28+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-03-20T00:29:28+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T14:30:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.11", "product": { "name": "Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.11::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "product": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "product_id": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "product_identification_helper": { "purl": "pkg:oci/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005?arch=amd64\u0026repository_url=registry.redhat.io/openshift3/jenkins-slave-base-rhel7\u0026tag=v3.11.188-2" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "product": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "product_id": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "product_identification_helper": { "purl": "pkg:oci/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift3/jenkins-slave-base-rhel7\u0026tag=v3.11.188-2" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64" }, "product_reference": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" }, "product_reference": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Joseph LaMagna-Reiter" ], "organization": "SPR Inc." } ], "cve": "CVE-2019-19351", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793282" } ], "notes": [ { "category": "description", "text": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "openshift/jenkins: /etc/passwd is given incorrect privileges", "title": "Vulnerability summary" }, { "category": "other", "text": "By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "category": "external", "summary": "RHBZ#1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "external", "summary": "RHSB-4859371", "url": "https://access.redhat.com/articles/4859371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19351", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-20T00:29:28+00:00", "details": "See the following documentation, which will be updated shortly for release\n3.11.188, for important instructions on how to upgrade your cluster and fully\napply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html", "product_ids": [ "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0803" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openshift/jenkins: /etc/passwd is given incorrect privileges" } ] }
rhsa-2020:0526
Vulnerability from csaf_redhat
Published
2020-02-27 12:02
Modified
2024-11-22 14:29
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.2.20 jenkins-slave-base-rhel7-container security update
Notes
Topic
An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.2.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.2.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0526", "url": "https://access.redhat.com/errata/RHSA-2020:0526" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0526.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.2.20 jenkins-slave-base-rhel7-container security update", "tracking": { "current_release_date": "2024-11-22T14:29:56+00:00", "generator": { "date": "2024-11-22T14:29:56+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:0526", "initial_release_date": "2020-02-27T12:02:56+00:00", "revision_history": [ { "date": "2020-02-27T12:02:56+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-02-27T12:02:56+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T14:29:56+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.2", "product": { "name": "Red Hat OpenShift Container Platform 4.2", "product_id": "7Server-RH7-RHOSE-4.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.2::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "product_id": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.2.20-202002171604" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "product_id": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.2.20-202002171604" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x as a component of Red Hat OpenShift Container Platform 4.2", "product_id": "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "relates_to_product_reference": "7Server-RH7-RHOSE-4.2" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64 as a component of Red Hat OpenShift Container Platform 4.2", "product_id": "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.2" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Joseph LaMagna-Reiter" ], "organization": "SPR Inc." } ], "cve": "CVE-2019-19351", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793282" } ], "notes": [ { "category": "description", "text": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "openshift/jenkins: /etc/passwd is given incorrect privileges", "title": "Vulnerability summary" }, { "category": "other", "text": "By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "category": "external", "summary": "RHBZ#1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "external", "summary": "RHSB-4859371", "url": "https://access.redhat.com/articles/4859371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19351", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-02-27T12:02:56+00:00", "details": "For OpenShift Container Platform 4.2 see the following documentation, which\nwill be updated shortly for release 4.2.20, for important instructions on\nhow to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.2/updating/updating-cluster-cli.html.", "product_ids": [ "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0526" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openshift/jenkins: /etc/passwd is given incorrect privileges" } ] }
rhsa-2020:0562
Vulnerability from csaf_redhat
Published
2020-02-25 05:54
Modified
2024-11-22 14:29
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.3.3 jenkins-slave-base-rhel7-container security update
Notes
Topic
An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.3.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.3.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0562", "url": "https://access.redhat.com/errata/RHSA-2020:0562" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0562.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.3.3 jenkins-slave-base-rhel7-container security update", "tracking": { "current_release_date": "2024-11-22T14:29:49+00:00", "generator": { "date": "2024-11-22T14:29:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:0562", "initial_release_date": "2020-02-25T05:54:12+00:00", "revision_history": [ { "date": "2020-02-25T05:54:12+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-02-25T05:54:12+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T14:29:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.3", "product": { "name": "Red Hat OpenShift Container Platform 4.3", "product_id": "7Server-RH7-RHOSE-4.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.3::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "product_id": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.3.3-202002171705" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64 as a component of Red Hat OpenShift Container Platform 4.3", "product_id": "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.3" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Joseph LaMagna-Reiter" ], "organization": "SPR Inc." } ], "cve": "CVE-2019-19351", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793282" } ], "notes": [ { "category": "description", "text": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "openshift/jenkins: /etc/passwd is given incorrect privileges", "title": "Vulnerability summary" }, { "category": "other", "text": "By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "category": "external", "summary": "RHBZ#1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "external", "summary": "RHSB-4859371", "url": "https://access.redhat.com/articles/4859371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19351", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-02-25T05:54:12+00:00", "details": "For OpenShift Container Platform 4.3 see the following documentation, which\nwill be updated shortly for release 4.3.3, for important instructions on\nhow to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.", "product_ids": [ "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0562" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openshift/jenkins: /etc/passwd is given incorrect privileges" } ] }
rhsa-2020_0803
Vulnerability from csaf_redhat
Published
2020-03-20 00:29
Modified
2024-11-22 14:30
Summary
Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-slave-base-rhel7-container security update
Notes
Topic
An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 3.11.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* openshift/jenkins: /etc/passwd is given incorrect privileges (CVE-2019-19351)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 3.11.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* openshift/jenkins: /etc/passwd is given incorrect privileges (CVE-2019-19351)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0803", "url": "https://access.redhat.com/errata/RHSA-2020:0803" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0803.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-slave-base-rhel7-container security update", "tracking": { "current_release_date": "2024-11-22T14:30:05+00:00", "generator": { "date": "2024-11-22T14:30:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:0803", "initial_release_date": "2020-03-20T00:29:28+00:00", "revision_history": [ { "date": "2020-03-20T00:29:28+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-03-20T00:29:28+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T14:30:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.11", "product": { "name": "Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.11::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "product": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "product_id": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "product_identification_helper": { "purl": "pkg:oci/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005?arch=amd64\u0026repository_url=registry.redhat.io/openshift3/jenkins-slave-base-rhel7\u0026tag=v3.11.188-2" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "product": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "product_id": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "product_identification_helper": { "purl": "pkg:oci/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift3/jenkins-slave-base-rhel7\u0026tag=v3.11.188-2" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64" }, "product_reference": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" }, "product_reference": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Joseph LaMagna-Reiter" ], "organization": "SPR Inc." } ], "cve": "CVE-2019-19351", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793282" } ], "notes": [ { "category": "description", "text": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "openshift/jenkins: /etc/passwd is given incorrect privileges", "title": "Vulnerability summary" }, { "category": "other", "text": "By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "category": "external", "summary": "RHBZ#1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "external", "summary": "RHSB-4859371", "url": "https://access.redhat.com/articles/4859371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19351", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-20T00:29:28+00:00", "details": "See the following documentation, which will be updated shortly for release\n3.11.188, for important instructions on how to upgrade your cluster and fully\napply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html", "product_ids": [ "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0803" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openshift/jenkins: /etc/passwd is given incorrect privileges" } ] }
rhsa-2020_0526
Vulnerability from csaf_redhat
Published
2020-02-27 12:02
Modified
2024-11-22 14:29
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.2.20 jenkins-slave-base-rhel7-container security update
Notes
Topic
An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.2.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.2.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0526", "url": "https://access.redhat.com/errata/RHSA-2020:0526" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0526.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.2.20 jenkins-slave-base-rhel7-container security update", "tracking": { "current_release_date": "2024-11-22T14:29:56+00:00", "generator": { "date": "2024-11-22T14:29:56+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:0526", "initial_release_date": "2020-02-27T12:02:56+00:00", "revision_history": [ { "date": "2020-02-27T12:02:56+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-02-27T12:02:56+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T14:29:56+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.2", "product": { "name": "Red Hat OpenShift Container Platform 4.2", "product_id": "7Server-RH7-RHOSE-4.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.2::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "product_id": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.2.20-202002171604" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "product_id": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.2.20-202002171604" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x as a component of Red Hat OpenShift Container Platform 4.2", "product_id": "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "relates_to_product_reference": "7Server-RH7-RHOSE-4.2" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64 as a component of Red Hat OpenShift Container Platform 4.2", "product_id": "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.2" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Joseph LaMagna-Reiter" ], "organization": "SPR Inc." } ], "cve": "CVE-2019-19351", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793282" } ], "notes": [ { "category": "description", "text": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "openshift/jenkins: /etc/passwd is given incorrect privileges", "title": "Vulnerability summary" }, { "category": "other", "text": "By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "category": "external", "summary": "RHBZ#1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "external", "summary": "RHSB-4859371", "url": "https://access.redhat.com/articles/4859371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19351", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-02-27T12:02:56+00:00", "details": "For OpenShift Container Platform 4.2 see the following documentation, which\nwill be updated shortly for release 4.2.20, for important instructions on\nhow to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.2/updating/updating-cluster-cli.html.", "product_ids": [ "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0526" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:92e5fdd14d410303bc080086629b76ba0dfe744c0e5502fe84d6be3ec46342d3_s390x", "7Server-RH7-RHOSE-4.2:openshift4/ose-jenkins-agent-base@sha256:b0efa9cf0c49dd50eea51ddb226196d74c8f6e5b599357b2f0bbc4b5da8763a4_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openshift/jenkins: /etc/passwd is given incorrect privileges" } ] }
rhsa-2020_0562
Vulnerability from csaf_redhat
Published
2020-02-25 05:54
Modified
2024-11-22 14:29
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.3.3 jenkins-slave-base-rhel7-container security update
Notes
Topic
An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.3.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.3.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0562", "url": "https://access.redhat.com/errata/RHSA-2020:0562" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0562.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.3.3 jenkins-slave-base-rhel7-container security update", "tracking": { "current_release_date": "2024-11-22T14:29:49+00:00", "generator": { "date": "2024-11-22T14:29:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:0562", "initial_release_date": "2020-02-25T05:54:12+00:00", "revision_history": [ { "date": "2020-02-25T05:54:12+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-02-25T05:54:12+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T14:29:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.3", "product": { "name": "Red Hat OpenShift Container Platform 4.3", "product_id": "7Server-RH7-RHOSE-4.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.3::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "product_id": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.3.3-202002171705" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64 as a component of Red Hat OpenShift Container Platform 4.3", "product_id": "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.3" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Joseph LaMagna-Reiter" ], "organization": "SPR Inc." } ], "cve": "CVE-2019-19351", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793282" } ], "notes": [ { "category": "description", "text": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "openshift/jenkins: /etc/passwd is given incorrect privileges", "title": "Vulnerability summary" }, { "category": "other", "text": "By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "category": "external", "summary": "RHBZ#1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "external", "summary": "RHSB-4859371", "url": "https://access.redhat.com/articles/4859371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19351", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-02-25T05:54:12+00:00", "details": "For OpenShift Container Platform 4.3 see the following documentation, which\nwill be updated shortly for release 4.3.3, for important instructions on\nhow to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.", "product_ids": [ "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0562" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openshift/jenkins: /etc/passwd is given incorrect privileges" } ] }
RHSA-2020:0562
Vulnerability from csaf_redhat
Published
2020-02-25 05:54
Modified
2024-11-22 14:29
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.3.3 jenkins-slave-base-rhel7-container security update
Notes
Topic
An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.3.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 4.3.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* openshift/jenkins: /etc/passwd was given incorrect privileges (CVE-2019-19351)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0562", "url": "https://access.redhat.com/errata/RHSA-2020:0562" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0562.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.3.3 jenkins-slave-base-rhel7-container security update", "tracking": { "current_release_date": "2024-11-22T14:29:49+00:00", "generator": { "date": "2024-11-22T14:29:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:0562", "initial_release_date": "2020-02-25T05:54:12+00:00", "revision_history": [ { "date": "2020-02-25T05:54:12+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-02-25T05:54:12+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T14:29:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.3", "product": { "name": "Red Hat OpenShift Container Platform 4.3", "product_id": "7Server-RH7-RHOSE-4.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.3::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "product_id": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.3.3-202002171705" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64 as a component of Red Hat OpenShift Container Platform 4.3", "product_id": "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.3" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Joseph LaMagna-Reiter" ], "organization": "SPR Inc." } ], "cve": "CVE-2019-19351", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793282" } ], "notes": [ { "category": "description", "text": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "openshift/jenkins: /etc/passwd is given incorrect privileges", "title": "Vulnerability summary" }, { "category": "other", "text": "By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "category": "external", "summary": "RHBZ#1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "external", "summary": "RHSB-4859371", "url": "https://access.redhat.com/articles/4859371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19351", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-02-25T05:54:12+00:00", "details": "For OpenShift Container Platform 4.3 see the following documentation, which\nwill be updated shortly for release 4.3.3, for important instructions on\nhow to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.", "product_ids": [ "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0562" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.3:openshift4/ose-jenkins-agent-base@sha256:46d1c6f6ff095d159c1cd0e1635d4ae2f6213437e0304aedbdec003356de6cd0_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openshift/jenkins: /etc/passwd is given incorrect privileges" } ] }
rhsa-2020:0803
Vulnerability from csaf_redhat
Published
2020-03-20 00:29
Modified
2024-11-22 14:30
Summary
Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-slave-base-rhel7-container security update
Notes
Topic
An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 3.11.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* openshift/jenkins: /etc/passwd is given incorrect privileges (CVE-2019-19351)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for jenkins-slave-base-rhel7-container is now available for Red Hat OpenShift Container Platform 3.11.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSecurity Fix(es):\n\n* openshift/jenkins: /etc/passwd is given incorrect privileges (CVE-2019-19351)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0803", "url": "https://access.redhat.com/errata/RHSA-2020:0803" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0803.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-slave-base-rhel7-container security update", "tracking": { "current_release_date": "2024-11-22T14:30:05+00:00", "generator": { "date": "2024-11-22T14:30:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:0803", "initial_release_date": "2020-03-20T00:29:28+00:00", "revision_history": [ { "date": "2020-03-20T00:29:28+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-03-20T00:29:28+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T14:30:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.11", "product": { "name": "Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.11::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "product": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "product_id": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "product_identification_helper": { "purl": "pkg:oci/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005?arch=amd64\u0026repository_url=registry.redhat.io/openshift3/jenkins-slave-base-rhel7\u0026tag=v3.11.188-2" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "product": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "product_id": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "product_identification_helper": { "purl": "pkg:oci/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift3/jenkins-slave-base-rhel7\u0026tag=v3.11.188-2" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64" }, "product_reference": "openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" }, "product_reference": "openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Joseph LaMagna-Reiter" ], "organization": "SPR Inc." } ], "cve": "CVE-2019-19351", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793282" } ], "notes": [ { "category": "description", "text": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", "title": "Vulnerability description" }, { "category": "summary", "text": "openshift/jenkins: /etc/passwd is given incorrect privileges", "title": "Vulnerability summary" }, { "category": "other", "text": "By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "category": "external", "summary": "RHBZ#1793282", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "category": "external", "summary": "RHSB-4859371", "url": "https://access.redhat.com/articles/4859371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19351", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-20T00:29:28+00:00", "details": "See the following documentation, which will be updated shortly for release\n3.11.188, for important instructions on how to upgrade your cluster and fully\napply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html", "product_ids": [ "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0803" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:ee3bcf5a78c48d196cf4087518c21336b682b0231fb9494041c2aad52087a005_amd64", "7Server-RH7-RHOSE-3.11:openshift3/jenkins-slave-base-rhel7@sha256:faba9c70ddfefadffa7bf4a922038c8098d22495fe9271eff083b2aad961b443_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openshift/jenkins: /etc/passwd is given incorrect privileges" } ] }
gsd-2019-19351
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2019-19351", "description": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.", "id": "GSD-2019-19351", "references": [ "https://access.redhat.com/errata/RHSA-2020:0803", "https://access.redhat.com/errata/RHSA-2020:0562", "https://access.redhat.com/errata/RHSA-2020:0526" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2019-19351" ], "details": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.", "id": "GSD-2019-19351", "modified": "2023-12-13T01:23:54.631830Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2019-19351", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "openshift", "version": { "version_data": [ { "version_affected": "=", "version_value": "Openshift 4 and 3.11" } ] } } ] }, "vendor_name": "Red Hat" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11." } ] }, "impact": { "cvss": [ { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "cweId": "CWE-266", "lang": "eng", "value": "CWE-266" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:redhat:openshift:3.11:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2019-19351" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-266" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351", "refsource": "CONFIRM", "tags": [ "Issue Tracking", "Vendor Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 3.4, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.0, "impactScore": 5.9 } }, "lastModifiedDate": "2023-02-12T23:37Z", "publishedDate": "2020-03-18T17:15Z" } } }
ghsa-q7r9-33vw-6rfr
Vulnerability from github
Published
2022-05-24 17:11
Modified
2023-02-02 21:33
Severity ?
Details
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.
{ "affected": [], "aliases": [ "CVE-2019-19351" ], "database_specific": { "cwe_ids": [ "CWE-266", "CWE-269" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2020-03-18T17:15:00Z", "severity": "MODERATE" }, "details": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.", "id": "GHSA-q7r9-33vw-6rfr", "modified": "2023-02-02T21:33:44Z", "published": "2022-05-24T17:11:49Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19351" }, { "type": "WEB", "url": "https://access.redhat.com/articles/4859371" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2020:0526" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2020:0562" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2020:0803" }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2019-19351" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793282" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" } ] }
fkie_cve-2019-19351
Vulnerability from fkie_nvd
Published
2020-03-18 17:15
Modified
2024-11-21 04:34
Severity ?
7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.
References
▼ | URL | Tags | |
---|---|---|---|
secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351 | Issue Tracking, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351 | Issue Tracking, Vendor Advisory |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:redhat:openshift:3.11:*:*:*:*:*:*:*", "matchCriteriaId": "64797939-6676-40DC-A81A-3FD0C45A8047", "vulnerable": true }, { "criteria": "cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "5F7E2F04-474D-4196-9CE8-242642990A16", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11." }, { "lang": "es", "value": "Se detect\u00f3 una vulnerabilidad de modificaci\u00f3n no segura en el archivo /etc/passwd en el contenedor openshift/jenkins. Un atacante con acceso al contenedor podr\u00eda usar este fallo para modificar el archivo /etc/passwd y escalar sus privilegios. Este CVE es espec\u00edfico de openshift/jenkins-slave-base-rhel7-container como es incluido en Openshift versiones 4 y 3.11." } ], "id": "CVE-2019-19351", "lastModified": "2024-11-21T04:34:37.907", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 3.4, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.0, "impactScore": 5.9, "source": "secalert@redhat.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.0, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2020-03-18T17:15:11.713", "references": [ { "source": "secalert@redhat.com", "tags": [ "Issue Tracking", "Vendor Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Issue Tracking", "Vendor Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19351" } ], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-266" } ], "source": "secalert@redhat.com", "type": "Primary" }, { "description": [ { "lang": "en", "value": "CWE-269" } ], "source": "nvd@nist.gov", "type": "Secondary" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.