GHSA-jw82-xjgr-g6f8
Withdrawn Advisory: kubernetes-nmstate Insecure Privilege Management
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/nmstate/kubernetes-nmstate | < 2.3.0-30 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
## Withdrawn Advisory
This advisory has been withdrawn. This link is maintained to preserve external references.
## Original Description
An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Versions before kubernetes-nmstate-handler-container-v2.3.0-30 are affected.
References
External links from the advisory. They lead to third-party sites.