8.2
Élevée
CVE-2025-3528 A flaw was found in the Mirror Registry
Description
A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MIRROR-REGISTRY-2.0-RHEL-8 2.0 | premières → < 2.0.7-9 | 2.0.7-9 |
| mirror registry for Red Hat OpenShift | Versions non publiées |
Références
- RHBA-2025:9645 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2359143 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification