CVE-2020-1705

Name of the Vulnerable Software and Affected Versions openshift/template-service-broker-operator versions prior to 4.3.0

Description A flaw was discovered in the openshift/template-service-broker-operator, where an insecure modification vulnerability in the /etc/passwd file allows an attacker with access to the container to modify /etc/passwd and escalate their privileges. The API endpoint /etc/passwd is affected.

Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the container to minimize the risk of exploitation.