CVE-2020-1704: Red Hat Openshift Service Mesh

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Affected products

• Red Hat Openshift Service Mesh: before 1.0.8 (fixed in 1.0.8)

Published 2020-02-17. Last modified 2026-06-17.