CVE-2024-2905Medium· 6.2▾ SunlitA security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than r…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than recommended, potentially exposing sensitive authentication data to unauthorized access.
rpm-ostree 1.2024.4rpm-ostree (all versions)rpm-ostree (all versions)rpm-ostree (all versions)rpm-ostreerpm-ostreeRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
If you need to apply the fix immediately, you can run the following commands, using credentials that have administrator access to an OpenShift cluster:
for node in $( oc get nodes -oname) ; do echo $node ; oc debug $node -- bash -c "ls -alhZ /host/etc/shadow"; done
for node in $( oc get nodes -oname) ; do echo $node ; oc debug $node -- chmod --verbose 0000 /host/etc/shadow /host/etc/gshadow /host/etc/shadow- /host/etc/gshadow-; done
As a precaution, we recommend rotating all user credentials stored in those files.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-15779Medium· 6.1Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation
CVE-2026-109243Medium· 4.4FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by crypto_write_pem without owner-only permissions
CVE-2024-45497High· 7.6A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod
CVE-2026-0775High· 7.0npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability
CVE-2026-120984Critical· 9.1Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import
CVE-2026-83495NoneTrainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration