8.2
Élevée
CVE-2025-3528 A flaw was found in the Mirror Registry
Description
A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MIRROR-REGISTRY-2.0-RHEL-8 2.0 | premières → < 2.0.7-9 | 2.0.7-9 |
| mirror registry for Red Hat OpenShift | Versions non publiées |