CVE-2020-1704

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-266CWE-732

Affected software

VendorProductVersions
Red Hatopenshift-service-mesh/kiali-rhel7-operatorAll maistra versions before 1.0.8

References

Timeline

Published
Feb 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-170406.5Windows Hyper-V Security Feature Bypass VulnerabilityCVE-2020-170417.8Windows Print Configuration Elevation of Privilege VulnerabilityCVE-2020-170428.8Windows Print Spooler Remote Code Execution VulnerabilityCVE-2020-170437.8Windows Remote Access Elevation of Privilege VulnerabilityCVE-2020-170447.8Windows Remote Access Elevation of Privilege VulnerabilityCVE-2020-170455.5Windows KernelStream Information Disclosure VulnerabilityCVE-2020-170465.5Windows Error Reporting Denial of Service VulnerabilityCVE-2020-170477.5Windows Network File System Denial of Service VulnerabilityCVE-2020-170484.2Chakra Scripting Engine Memory Corruption VulnerabilityCVE-2020-170496.6A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegCVE-2020-17057.0A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modificationCVE-2020-170519.8Windows Network File System Remote Code Execution Vulnerability
CVE-2020-1704: High severity, CVSS 7.8 | Vulnix