GHSA-jw82-xjgr-g6f8

Source

https://github.com/advisories/GHSA-jw82-xjgr-g6f8

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jw82-xjgr-g6f8/GHSA-jw82-xjgr-g6f8.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-jw82-xjgr-g6f8

Aliases

CVE-2020-1742

Withdrawn

2023-08-23T21:44:47Z

Published

2022-05-24T19:04:13Z

Modified

2026-09-10T03:49:39Z

Severity

7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Withdrawn Advisory: kubernetes-nmstate Insecure Privilege Management

Details

Withdrawn Advisory

This advisory has been withdrawn. This link is maintained to preserve external references.

Original Description

An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Versions before kubernetes-nmstate-handler-container-v2.3.0-30 are affected.

Database specific

{
    "cwe_ids":  [
        "CWE-269",
        "CWE-732"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2023-07-13T23:17:51Z",
    "nvd_published_at":  "2021-06-07T20:15:00Z",
    "severity":  "HIGH"
}

References

Affected packages

Go / github.com/nmstate/kubernetes-nmstate

Package

Name: github.com/nmstate/kubernetes-nmstate; View open source insights on deps.dev
Purl: pkg:golang/github.com/nmstate/kubernetes-nmstate

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Database specific

last_known_affected_version_range

"< 2.3.0-30"

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jw82-xjgr-g6f8/GHSA-jw82-xjgr-g6f8.json"