Red Hat Mirror Registry Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the quay-app container of the Mirror Registry for OpenShift. The flaw allows a malicious actor with access to the container to modify the passwd file, potentially elevating privileges to the root user within the pod.

Impact

Exploitation of this vulnerability allows for local privilege escalation to the root user within the affected pod.

Remediation

To mitigate this vulnerability, add '--security-opt=no-new-privileges' in each Mirror Registry systemd configuration. This will prevent privilege escalation until the issue is resolved.