CVE-2025-7195 Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. 

In affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
Problem types: cwe_id: CWE-276
description: Incorrect Default Permissions
Affected products: vendor: operator-framework
product: operator-sdk
default_status: unaffected
vendor: Red Hat
product: RHEL-9-CNV-4.17
cpes: cpe:/a:redhat:container_native_virtualization:4.17::el9
default_status: affected
vendor: Red Hat
product: RHEL-9-CNV-4.18
cpes: cpe:/a:redhat:container_native_virtualization:4.18::el9
default_status: affected
vendor: Red Hat
product: RHEL-9-CNV-4.20
cpes: cpe:/a:redhat:container_native_virtualization:4.20::el9
default_status: affected
vendor: Red Hat
product: File Integrity Operator 1
cpes: cpe:/a:redhat:openshift_file_integrity_operator:1::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.6
cpes: cpe:/a:redhat:multicluster_engine:2.6::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.6
cpes: cpe:/a:redhat:multicluster_engine:2.6::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.6
cpes: cpe:/a:redhat:multicluster_engine:2.6::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.6
cpes: cpe:/a:redhat:multicluster_engine:2.6::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.6
cpes: cpe:/a:redhat:multicluster_engine:2.6::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.6
cpes: cpe:/a:redhat:multicluster_engine:2.6::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.6
cpes: cpe:/a:redhat:multicluster_engine:2.6::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.7
cpes: cpe:/a:redhat:multicluster_engine:2.7::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.8
cpes: cpe:/a:redhat:multicluster_engine:2.8::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.8
cpes: cpe:/a:redhat:multicluster_engine:2.8::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.8
cpes: cpe:/a:redhat:multicluster_engine:2.8::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.8
cpes: cpe:/a:redhat:multicluster_engine:2.8::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.8
cpes: cpe:/a:redhat:multicluster_engine:2.8::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.8
cpes: cpe:/a:redhat:multicluster_engine:2.8::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.8
cpes: cpe:/a:redhat:multicluster_engine:2.8::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.8
cpes: cpe:/a:redhat:multicluster_engine:2.8::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.9
cpes: cpe:/a:redhat:multicluster_engine:2.9::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.9
cpes: cpe:/a:redhat:multicluster_engine:2.9::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.9
cpes: cpe:/a:redhat:multicluster_engine:2.9::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.9
cpes: cpe:/a:redhat:multicluster_engine:2.9::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.9
cpes: cpe:/a:redhat:multicluster_engine:2.9::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.9
cpes: cpe:/a:redhat:multicluster_engine:2.9::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.9
cpes: cpe:/a:redhat:multicluster_engine:2.9::el9
default_status: affected
vendor: Red Hat
product: multicluster engine for Kubernetes 2.9
cpes: cpe:/a:redhat:multicluster_engine:2.9::el9
default_status: affected
vendor: Red Hat
product: OpenShift Compliance Operator 1
cpes: cpe:/a:redhat:openshift_compliance_operator:1::el9
default_status: affected
vendor: Red Hat
product: OpenShift Compliance Operator 1
cpes: cpe:/a:redhat:openshift_compliance_operator:1::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.11
cpes: cpe:/a:redhat:acm:2.11::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.11
cpes: cpe:/a:redhat:acm:2.11::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.11
cpes: cpe:/a:redhat:acm:2.11::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.11
cpes: cpe:/a:redhat:acm:2.11::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.12
cpes: cpe:/a:redhat:acm:2.12::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.13
cpes: cpe:/a:redhat:acm:2.13::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.13
cpes: cpe:/a:redhat:acm:2.13::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.13
cpes: cpe:/a:redhat:acm:2.13::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.13
cpes: cpe:/a:redhat:acm:2.13::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.13
cpes: cpe:/a:redhat:acm:2.13::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2.14
cpes: cpe:/a:redhat:acm:2.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.14
cpes: cpe:/a:redhat:openshift_data_foundation:4.14::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.15
cpes: cpe:/a:redhat:openshift_data_foundation:4.15::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.16
cpes: cpe:/a:redhat:openshift_data_foundation:4.16::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.17
cpes: cpe:/a:redhat:openshift_data_foundation:4.17::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4.18
cpes: cpe:/a:redhat:openshift_data_foundation:4.18::el9
default_status: affected
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: unknown
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: unaffected
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: unaffected
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: unknown
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: affected
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: unaffected
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: unknown
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: unknown
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: unknown
vendor: Red Hat
product: Multicluster Engine for Kubernetes
cpes: cpe:/a:redhat:multicluster_engine
default_status: unknown
vendor: Red Hat
product: Multicluster Global Hub
cpes: cpe:/a:redhat:multicluster_globalhub
default_status: unaffected
vendor: Red Hat
product: Multicluster Global Hub
cpes: cpe:/a:redhat:multicluster_globalhub
default_status: unaffected
vendor: Red Hat
product: Multicluster Global Hub
cpes: cpe:/a:redhat:multicluster_globalhub
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unknown
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unknown
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unknown
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unknown
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unknown
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: unaffected
vendor: Red Hat
product: Red Hat build of Apicurio Registry 2
cpes: cpe:/a:redhat:service_registry:2
default_status: unknown
vendor: Red Hat
product: Red Hat build of Apicurio Registry 3
cpes: cpe:/a:redhat:apicurio_registry:3
default_status: unaffected
vendor: Red Hat
product: Red Hat Fuse 7
cpes: cpe:/a:redhat:jboss_fuse:7
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Virtualization 4
cpes: cpe:/a:redhat:container_native_virtualization:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Virtualization 4
cpes: cpe:/a:redhat:container_native_virtualization:4
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift Virtualization 4
cpes: cpe:/a:redhat:container_native_virtualization:4
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift Virtualization 4
cpes: cpe:/a:redhat:container_native_virtualization:4
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift Virtualization 4
cpes: cpe:/a:redhat:container_native_virtualization:4
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift Virtualization 4
cpes: cpe:/a:redhat:container_native_virtualization:4
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift Virtualization 4
cpes: cpe:/a:redhat:container_native_virtualization:4
default_status: unaffected
vendor: Red Hat
product: Red Hat Web Terminal
cpes: cpe:/a:redhat:webterminal:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Web Terminal
cpes: cpe:/a:redhat:webterminal:1
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Red Hat would like to thank Antony Di Scala, James Force, and Michael Whale for reporting this issue.
Published: 2025-08-07T19:05:08.756Z