CVE-2021-20264CWE-266

An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers

published October 6, 2021

CVSS
—
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2021-10-06T15:12Z
EPSS history
Timeline
  • 06 OCT 15:12Z
    An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers
    cvelistv5