Files
CVEs-PoC/2020/CVE-2020-1742.md
T
2024-05-25 21:48:12 +02:00

18 lines
780 B
Markdown

### [CVE-2020-1742](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1742)
![](https://img.shields.io/static/v1?label=Product&message=nmstate%2Fkubernetes-nmstate-handler&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-266&color=brighgreen)
### Description
An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Versions before kubernetes-nmstate-handler-container-v2.3.0-30 are affected.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/sho-luv/zerologon