CWE-266 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-266/ Sun, 26 Feb 2023 06:45:02 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-266 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-266/ 32 32 CVE-2018-1088 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1088/ Sun, 26 Feb 2023 06:45:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1088/ A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

The post CVE-2018-1088 appeared first on CVE Vulnerability.

]]> A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

The post CVE-2018-1088 appeared first on CVE Vulnerability.

]]> CVE-2020-35514 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35514/ Sun, 26 Feb 2023 06:41:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35514/ An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local access to the node, to copy this kubeconfig file and attempt to add their own node to the OpenShift cluster. The highest threat from this vulnerability […]

The post CVE-2020-35514 appeared first on CVE Vulnerability.

]]> An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local access to the node, to copy this kubeconfig file and attempt to add their own node to the OpenShift cluster. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects versions before openshift4/ose-machine-config-operator v4.7.0-202105111858.p0.

The post CVE-2020-35514 appeared first on CVE Vulnerability.

]]> CVE-2020-1708 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-1708/ Sun, 26 Feb 2023 06:38:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-1708/ It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their […]

The post CVE-2020-1708 appeared first on CVE Vulnerability.

]]> It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/mysql-apb.

The post CVE-2020-1708 appeared first on CVE Vulnerability.

]]> CVE-2020-1705 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-1705/ Sun, 26 Feb 2023 06:38:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-1705/ A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/template-service-broker-operator. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The post CVE-2020-1705 appeared first on CVE Vulnerability.

]]> A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/template-service-broker-operator. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The post CVE-2020-1705 appeared first on CVE Vulnerability.

]]> CVE-2020-14318 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-14318/ Sun, 26 Feb 2023 06:37:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-14318/ A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.

The post CVE-2020-14318 appeared first on CVE Vulnerability.

]]> A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.

The post CVE-2020-14318 appeared first on CVE Vulnerability.

]]> CVE-2020-10695 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-10695/ Sun, 26 Feb 2023 06:35:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-10695/ An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges.

The post CVE-2020-10695 appeared first on CVE Vulnerability.

]]> An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges.

The post CVE-2020-10695 appeared first on CVE Vulnerability.

]]> CVE-2019-19349 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19349/ Sun, 26 Feb 2023 06:32:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19349/ An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The post CVE-2019-19349 appeared first on CVE Vulnerability.

]]> An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The post CVE-2019-19349 appeared first on CVE Vulnerability.

]]> CVE-2019-19355 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19355/ Sun, 26 Feb 2023 06:32:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19355/ An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/ansible-operator-container as shipped in Openshift 4.

The post CVE-2019-19355 appeared first on CVE Vulnerability.

]]> An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/ansible-operator-container as shipped in Openshift 4.

The post CVE-2019-19355 appeared first on CVE Vulnerability.

]]> CVE-2019-19354 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19354/ Sun, 26 Feb 2023 06:32:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19354/ An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The post CVE-2019-19354 appeared first on CVE Vulnerability.

]]> An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The post CVE-2019-19354 appeared first on CVE Vulnerability.

]]> CVE-2019-19353 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19353/ Sun, 26 Feb 2023 06:32:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19353/ An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The post CVE-2019-19353 appeared first on CVE Vulnerability.

]]> An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The post CVE-2019-19353 appeared first on CVE Vulnerability.

]]>