Към съдържанието
Търсене

CVE-2025-7195: operator-framework operator-sdk, лоша конфигурация

6.4

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, при специфични условия, с администраторски права и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. In affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

Засегнати продукти

  • operator-framework operator-sdk: преди 0.15.2
  • Red Hat RHEL-9-CNV-4.17: от v4.17.39-2 нататък
  • Red Hat RHEL-9-CNV-4.18: от v4.18.25-3 нататък
  • Red Hat RHEL-9-CNV-4.20: от v4.20.3-3 нататък
  • Red Hat multicluster engine for Kubernetes 2.6: от v2.6 нататък
  • Red Hat multicluster engine for Kubernetes 2.6: от v2.6 нататък
  • Red Hat multicluster engine for Kubernetes 2.6: от v2.6 нататък
  • Red Hat multicluster engine for Kubernetes 2.6: от v2.6 нататък
  • Red Hat multicluster engine for Kubernetes 2.6: от v2.6 нататък
  • Red Hat multicluster engine for Kubernetes 2.6: от v2.6 нататък
  • Red Hat multicluster engine for Kubernetes 2.6: от v2.6 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.7: от v2.7 нататък
  • Red Hat multicluster engine for Kubernetes 2.8: от 1765872406 нататък
  • Red Hat multicluster engine for Kubernetes 2.8: от 1766360304 нататък
  • Red Hat multicluster engine for Kubernetes 2.8: от 1765669648 нататък
  • Red Hat multicluster engine for Kubernetes 2.8: от 1765866268 нататък
  • Red Hat multicluster engine for Kubernetes 2.8: от 1765872399 нататък
  • Red Hat multicluster engine for Kubernetes 2.8: от 1765872402 нататък
  • Red Hat multicluster engine for Kubernetes 2.8: от 1765872398 нататък
  • Red Hat multicluster engine for Kubernetes 2.8: от 1765872400 нататък
  • Red Hat multicluster engine for Kubernetes 2.9: от v2.9 нататък
  • Red Hat multicluster engine for Kubernetes 2.9: от v2.9 нататък
  • Red Hat multicluster engine for Kubernetes 2.9: от v2.9 нататък
  • Red Hat multicluster engine for Kubernetes 2.9: от v2.9 нататък
  • Red Hat multicluster engine for Kubernetes 2.9: от v2.9 нататък
  • Red Hat multicluster engine for Kubernetes 2.9: от v2.9 нататък
  • Red Hat multicluster engine for Kubernetes 2.9: от v2.9 нататък
  • Red Hat multicluster engine for Kubernetes 2.9: от v2.9 нататък
  • Red Hat OpenShift Compliance Operator 1: от 1.8.0 нататък
  • Red Hat OpenShift Compliance Operator 1: от 1768172669 нататък
  • Red Hat OpenShift File Integrity Operator - FIO 1: от v1.3 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11: от v2.11 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11: от v2.11 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11: от v2.11 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11: от v2.11 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от v2.12 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от v2.12 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от v2.12 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от v2.12 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от v2.12 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от v2.12 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от v2.12 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от 1773285089 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от 1773259164 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от 1773259182 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от 1773358651 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12: от 1773090513 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13: от 1767569821 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13: от 1767829032 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13: от 1767569821 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13: от 1767656229 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13: от 1767829032 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от v2.14 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от v2.14 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от v2.14 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от v2.14 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от v2.14 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от v2.14 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от 1769720041 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от 1770343757 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от 1769721579 нататък
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: от 1770336554 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178221 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178222 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178236 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178273 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178715 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178261 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178354 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178419 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178768 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178319 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178386 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178406 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178615 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178379 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178329 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178423 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764178419 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.14: от v4.14-1764215448 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176261 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176342 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176372 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176892 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176485 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176698 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176699 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176675 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764177101 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176690 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764221806 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764222436 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764177174 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764177033 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764176958 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764177101 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764177020 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.15: от v4.15-1764177029 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764168955 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169118 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169242 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169544 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169347 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169479 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169526 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169464 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169687 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169457 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169527 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169577 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169730 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169598 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169623 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764169710 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764170019 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.16: от v4.16-1764170021 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764167834 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764167795 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764167826 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764167876 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168179 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764167987 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168476 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168475 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168431 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168662 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168475 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168536 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168609 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168731 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168699 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764168859 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764169063 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764169125 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.17: от v4.17-1764169222 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854289 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854280 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854280 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854319 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761855549 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854321 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854422 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854430 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854457 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854484 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854398 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854494 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854493 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854504 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854489 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761855467 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761854524 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1762335558 нататък
  • Red Hat Red Hat Openshift Data Foundation 4.18: от v4.18-1761855234 нататък
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Global Hub
  • Red Hat Multicluster Global Hub
  • Red Hat Multicluster Global Hub
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Security 4
  • Red Hat Red Hat build of Apicurio Registry 2
  • Red Hat Red Hat build of Apicurio Registry 3
  • Red Hat Red Hat Fuse 7
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat Web Terminal
  • Red Hat Red Hat Web Terminal

Вид слабост

История

  • 7 август 2025 Публикувано

Други уязвимости в operator-framework operator-sdk

Първоизточници

CVE-2025-7195: operator-framework operator-sdk, лоша конфигурация | freedomonline.bg