Back to search
CVE-2020-1690
Published: Jun 7, 2021
Modified: Aug 4, 2024
PUBLISHED
Description
An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation. A non-root attacker in one or more Red Hat OpenStack (RHOSP) containers could send messages to the dbus. With access to the dbus, the attacker could start or stop services, possibly causing a denial of service. Versions before openstack-selinux 0.8.24 are affected.
| Vendor | Product | Versions |
|---|---|---|
n/a | openstack-selinux | affected before openstack-selinux 0.8.24 |
Weaknesses (CWE)
References
https://bugzilla.redhat.com/show_bug.cgi?id=1789640
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now