CVE-2020-1704

Name of the Vulnerable Software and Affected Versions OpenShift ServiceMesh (maistra) versions prior to 1.0.8

Description A flaw was discovered in the /etc/passwd file, allowing an attacker with access to the container to modify it and potentially escalate their privileges. This issue affects the openshift/istio-kialia-rhel7-operator-container.

Recommendations For versions prior to 1.0.8, update to version 1.0.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the container to minimize the risk of exploitation.