← Back

CVE-2020-1742

nvd nist
Published: Jun 7, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.0
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.0 / Impact: 5.9
Source: NVD

Description

An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Versions before kubernetes-nmstate-handler-container-v2.3.0-30 are affected.

Affected (2)

Nmstate
1 product
Kubernetes Nmstate
Redhat
1 product
Openshift Virtualization
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Kubernetes Nmstate
Before 2.3.0
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Openshift Virtualization
Version 2

Related CWEs

CWE-266
Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

Source: secalert@redhat.com
ExploitIssue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.