Can you explain this vulnerability to me?

This vulnerability is a container privilege escalation flaw found in certain CodeReady Workspaces images. It occurs because the /etc/passwd file is created with group-writable permissions during build time. An attacker who can run commands inside the affected container, even as a non-root user, and who is a member of the root group, can modify the /etc/passwd file. This allows the attacker to add a new user with any user ID, including UID 0, effectively gaining full root privileges within the container.

Useful 0 Not Useful 0

How can this vulnerability impact me? :

This vulnerability can allow an attacker with limited access inside a container to escalate their privileges to root within that container. This means the attacker could gain full control over the container environment, potentially leading to unauthorized actions, data modification, or disruption of services running inside the container.

Useful 0 Not Useful 0