You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Cross references:
No existing reports found with this module or alias.
See doc/triage.md for instructions on how to triage this report.
modules:
- module: github.com/nmstate/kubernetes-nmstate
versions:
- introduced: TODO (earliest fixed "", vuln range "< 2.3.0-30")
vulnerable_at: 0.79.0
packages:
- package: github.com/nmstate/kubernetes-nmstate
summary: kubernetes-nmstate Insecure Privilege Management
description: |-
An insecure modification vulnerability flaw was found in containers using
nmstate/kubernetes-nmstate-handler. An attacker with access to the container
could use this flaw to modify /etc/passwd and escalate their privileges.
Versions before kubernetes-nmstate-handler-container-v2.3.0-30 are affected.
cves:
- CVE-2020-1742
ghsas:
- GHSA-jw82-xjgr-g6f8
references:
- web: https://nvd.nist.gov/vuln/detail/CVE-2020-1742
- web: https://bugzilla.redhat.com/show_bug.cgi?id=1803608
- advisory: https://github.com/advisories/GHSA-jw82-xjgr-g6f8
The text was updated successfully, but these errors were encountered:
In GitHub Security Advisory GHSA-jw82-xjgr-g6f8, there is a vulnerability in the following Go packages or modules:
Cross references:
No existing reports found with this module or alias.
See doc/triage.md for instructions on how to triage this report.
The text was updated successfully, but these errors were encountered: