A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.
The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.
| Link | Tags |
|---|---|
| https://access.redhat.com/errata/RHSA-2023:1033 | third party advisory vendor advisory |
| https://access.redhat.com/errata/RHSA-2023:1503 | third party advisory vendor advisory |
| https://access.redhat.com/security/cve/CVE-2022-4318 | third party advisory vdb entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=2152703 | third party advisory issue tracking |