{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "`docker cp` allows unexpected chmod of host file", "tracking": { "current_release_date": "2026-08-14T04:33:31+00:00", "generator": { "date": "2026-08-14T04:33:31+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-41089", "initial_release_date": "2021-10-04T00:00:00+00:00", "revision_history": [ { "date": "2026-08-14T04:33:31+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Migration Toolkit for Virtualization 2.2.0", "product": { "name": "Migration Toolkit for Virtualization 2.2.0", "product_id": "mtv-2.2.virtualization::el8", "product_identification_helper": { "cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2.2::el8" } } }, { "category": "product_name", "name": "Migration Toolkit for Virtualization 2.11.0", "product": { "name": "Migration Toolkit for Virtualization 2.11.0", "product_id": "mtv-2.virtualization", "product_identification_helper": { "cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.19", "product": { "name": "OpenShift Container Platform 4.19", "product_id": "openshift-4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } }, { "category": "product_name", "name": "Red Hat Quay v3.10.0", "product": { "name": "Red Hat Quay v3.10.0", "product_id": "quay-3.10", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.10" } } }, { "category": "product_name", "name": "Red Hat Quay v3.12.0", "product": { "name": "Red Hat Quay v3.12.0", "product_id": "quay-3.12", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.12" } } }, { "category": "product_name", "name": "Red Hat Quay v3.13.0", "product": { "name": "Red Hat Quay v3.13.0", "product_id": "quay-3.13", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.13" } } }, { "category": "product_name", "name": "Red Hat Quay v3.14.0", "product": { "name": "Red Hat Quay v3.14.0", "product_id": "quay-3.14", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.14" } } }, { "category": "product_name", "name": "Red Hat Quay v3.15.0", "product": { "name": "Red Hat Quay v3.15.0", "product_id": "quay-3.15", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.15" } } }, { "category": "product_name", "name": "Red Hat Quay v3.9.18", "product": { "name": "Red Hat Quay v3.9.18", "product_id": "quay-3.9", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3.9" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product_id": "rhacm-2", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2" } } }, { "category": "product_name", "name": "OpenShift Container Platform 4.13", "product": { "name": "OpenShift Container Platform 4.13", "product_id": "rhai-1", "product_identification_helper": { "cpe": "cpe:/a:redhat:assisted_installer:1" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_version", "name": "docker", "product": { "name": "docker", "product_id": "docker.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/docker?arch=src" } } }, { "category": "product_version", "name": "migration-toolkit-virtualization/mtv-controller-rhel8", "product": { "name": "migration-toolkit-virtualization/mtv-controller-rhel8", "product_id": "migration-toolkit-virtualization/mtv-controller-rhel8", "product_identification_helper": { "purl": "pkg:oci/mtv-controller-rhel8?repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel8" } } }, { "category": "product_version", "name": "migration-toolkit-virtualization/mtv-controller-rhel8", "product": { "name": "migration-toolkit-virtualization/mtv-controller-rhel8", "product_id": "migration-toolkit-virtualization/mtv-controller-rhel8-0:2.2.0-39", "product_identification_helper": { "purl": "pkg:oci/mtv-controller-rhel8@2.2.0-39?repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-controller-rhel8" } } }, { "category": "product_version", "name": "openshift-compliance-openscap-container", "product": { "name": "openshift-compliance-openscap-container", "product_id": "openshift-compliance-openscap-container", "product_identification_helper": { "purl": "pkg:oci/openshift-compliance-openscap-container?repository_url=registry.redhat.io/openshift-compliance-openscap-container" } } }, { "category": "product_version", "name": "openshift-file-integrity-operator-container", "product": { "name": "openshift-file-integrity-operator-container", "product_id": "openshift-file-integrity-operator-container", "product_identification_helper": { "purl": "pkg:oci/openshift-file-integrity-operator-container?repository_url=registry.redhat.io/openshift-file-integrity-operator-container" } } }, { "category": "product_version", "name": "quay/quay-builder-rhel8", "product": { "name": "quay/quay-builder-rhel8", "product_id": "quay/quay-builder-rhel8", "product_identification_helper": { "purl": "pkg:oci/quay-builder-rhel8?repository_url=registry.redhat.io/quay/quay-builder-rhel8" } } }, { "category": "product_version", "name": "rhacm-assisted-service-container", "product": { "name": "rhacm-assisted-service-container", "product_id": "rhacm-assisted-service-container", "product_identification_helper": { "purl": "pkg:oci/rhacm-assisted-service-container?repository_url=registry.redhat.io/rhacm-assisted-service-container" } } }, { "category": "product_version", "name": "rhacm2/agent-service-rhel8", "product": { "name": "rhacm2/agent-service-rhel8", "product_id": "rhacm2/agent-service-rhel8", "product_identification_helper": { "purl": "pkg:oci/agent-service-rhel8?repository_url=registry.redhat.io/rhacm2/agent-service-rhel8" } } }, { "category": "product_version", "name": "rhacm2/assisted-installer-agent-rhel8", "product": { "name": "rhacm2/assisted-installer-agent-rhel8", "product_id": "rhacm2/assisted-installer-agent-rhel8", "product_identification_helper": { "purl": "pkg:oci/assisted-installer-agent-rhel8?repository_url=registry.redhat.io/rhacm2/assisted-installer-agent-rhel8" } } }, { "category": "product_version", "name": "rhacm2/assisted-installer-reporter-rhel8", "product": { "name": "rhacm2/assisted-installer-reporter-rhel8", "product_id": "rhacm2/assisted-installer-reporter-rhel8", "product_identification_helper": { "purl": "pkg:oci/assisted-installer-reporter-rhel8?repository_url=registry.redhat.io/rhacm2/assisted-installer-reporter-rhel8" } } }, { "category": "product_version", "name": "rhacm2/assisted-installer-rhel8", "product": { "name": "rhacm2/assisted-installer-rhel8", "product_id": "rhacm2/assisted-installer-rhel8", "product_identification_helper": { "purl": "pkg:oci/assisted-installer-rhel8?repository_url=registry.redhat.io/rhacm2/assisted-installer-rhel8" } } }, { "category": "product_version", "name": "rhacm2/multicluster-operators-subscription-release-rhel8", "product": { "name": "rhacm2/multicluster-operators-subscription-release-rhel8", "product_id": "rhacm2/multicluster-operators-subscription-release-rhel8", "product_identification_helper": { "purl": "pkg:oci/multicluster-operators-subscription-release-rhel8?repository_url=registry.redhat.io/rhacm2/multicluster-operators-subscription-release-rhel8" } } }, { "category": "product_version", "name": "rhacm2/multicluster-operators-subscription-rhel8", "product": { "name": "rhacm2/multicluster-operators-subscription-rhel8", "product_id": "rhacm2/multicluster-operators-subscription-rhel8", "product_identification_helper": { "purl": "pkg:oci/multicluster-operators-subscription-rhel8?repository_url=registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel8" } } }, { "category": "product_version", "name": "rhacm2/search-rhel8", "product": { "name": "rhacm2/search-rhel8", "product_id": "rhacm2/search-rhel8", "product_identification_helper": { "purl": "pkg:oci/search-rhel8?repository_url=registry.redhat.io/rhacm2/search-rhel8" } } }, { "category": "product_version", "name": "rhai-tech-preview/assisted-installer-agent-rhel8", "product": { "name": "rhai-tech-preview/assisted-installer-agent-rhel8", "product_id": "rhai-tech-preview/assisted-installer-agent-rhel8", "product_identification_helper": { "purl": "pkg:oci/assisted-installer-agent-rhel8?repository_url=registry.redhat.io/rhai-tech-preview/assisted-installer-agent-rhel8" } } }, { "category": "product_version", "name": "rhai-tech-preview/assisted-installer-reporter-rhel8", "product": { "name": "rhai-tech-preview/assisted-installer-reporter-rhel8", "product_id": "rhai-tech-preview/assisted-installer-reporter-rhel8", "product_identification_helper": { "purl": "pkg:oci/assisted-installer-reporter-rhel8?repository_url=registry.redhat.io/rhai-tech-preview/assisted-installer-reporter-rhel8" } } }, { "category": "product_version", "name": "rhai-tech-preview/assisted-installer-rhel8", "product": { "name": "rhai-tech-preview/assisted-installer-rhel8", "product_id": "rhai-tech-preview/assisted-installer-rhel8", "product_identification_helper": { "purl": "pkg:oci/assisted-installer-rhel8?repository_url=registry.redhat.io/rhai-tech-preview/assisted-installer-rhel8" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "docker.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:docker.src" }, "product_reference": "docker.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "migration-toolkit-virtualization/mtv-controller-rhel8 as a component of Migration Toolkit for Virtualization 2.11.0", "product_id": "mtv-2.virtualization:migration-toolkit-virtualization/mtv-controller-rhel8" }, "product_reference": "migration-toolkit-virtualization/mtv-controller-rhel8", "relates_to_product_reference": "mtv-2.virtualization" }, { "category": "default_component_of", "full_product_name": { "name": "migration-toolkit-virtualization/mtv-controller-rhel8-0:2.2.0-39 as a component of Migration Toolkit for Virtualization 2.2.0", "product_id": "mtv-2.2.virtualization::el8:migration-toolkit-virtualization/mtv-controller-rhel8-0:2.2.0-39" }, "product_reference": "migration-toolkit-virtualization/mtv-controller-rhel8-0:2.2.0-39", "relates_to_product_reference": "mtv-2.2.virtualization::el8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-compliance-openscap-container as a component of OpenShift Container Platform 4.19", "product_id": "openshift-4:openshift-compliance-openscap-container" }, "product_reference": "openshift-compliance-openscap-container", "relates_to_product_reference": "openshift-4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-file-integrity-operator-container as a component of OpenShift Container Platform 4.19", "product_id": "openshift-4:openshift-file-integrity-operator-container" }, "product_reference": "openshift-file-integrity-operator-container", "relates_to_product_reference": "openshift-4" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-rhel8 as a component of Red Hat Quay v3.15.0", "product_id": "quay-3.15:quay/quay-builder-rhel8" }, "product_reference": "quay/quay-builder-rhel8", "relates_to_product_reference": "quay-3.15" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-rhel8 as a component of Red Hat Quay v3.9.18", "product_id": "quay-3.9:quay/quay-builder-rhel8" }, "product_reference": "quay/quay-builder-rhel8", "relates_to_product_reference": "quay-3.9" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-rhel8 as a component of Red Hat Quay v3.13.0", "product_id": "quay-3.13:quay/quay-builder-rhel8" }, "product_reference": "quay/quay-builder-rhel8", "relates_to_product_reference": "quay-3.13" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-rhel8 as a component of Red Hat Quay v3.14.0", "product_id": "quay-3.14:quay/quay-builder-rhel8" }, "product_reference": "quay/quay-builder-rhel8", "relates_to_product_reference": "quay-3.14" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-rhel8 as a component of Red Hat Quay v3.12.0", "product_id": "quay-3.12:quay/quay-builder-rhel8" }, "product_reference": "quay/quay-builder-rhel8", "relates_to_product_reference": "quay-3.12" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-rhel8 as a component of Red Hat Quay v3.10.0", "product_id": "quay-3.10:quay/quay-builder-rhel8" }, "product_reference": "quay/quay-builder-rhel8", "relates_to_product_reference": "quay-3.10" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm-assisted-service-container as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product_id": "rhacm-2:rhacm-assisted-service-container" }, "product_reference": "rhacm-assisted-service-container", "relates_to_product_reference": "rhacm-2" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/agent-service-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product_id": "rhacm-2:rhacm2/agent-service-rhel8" }, "product_reference": "rhacm2/agent-service-rhel8", "relates_to_product_reference": "rhacm-2" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/assisted-installer-agent-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product_id": "rhacm-2:rhacm2/assisted-installer-agent-rhel8" }, "product_reference": "rhacm2/assisted-installer-agent-rhel8", "relates_to_product_reference": "rhacm-2" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/assisted-installer-reporter-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product_id": "rhacm-2:rhacm2/assisted-installer-reporter-rhel8" }, "product_reference": "rhacm2/assisted-installer-reporter-rhel8", "relates_to_product_reference": "rhacm-2" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/assisted-installer-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product_id": "rhacm-2:rhacm2/assisted-installer-rhel8" }, "product_reference": "rhacm2/assisted-installer-rhel8", "relates_to_product_reference": "rhacm-2" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/multicluster-operators-subscription-release-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product_id": "rhacm-2:rhacm2/multicluster-operators-subscription-release-rhel8" }, "product_reference": "rhacm2/multicluster-operators-subscription-release-rhel8", "relates_to_product_reference": "rhacm-2" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/multicluster-operators-subscription-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product_id": "rhacm-2:rhacm2/multicluster-operators-subscription-rhel8" }, "product_reference": "rhacm2/multicluster-operators-subscription-rhel8", "relates_to_product_reference": "rhacm-2" }, { "category": "default_component_of", "full_product_name": { "name": "rhacm2/search-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0", "product_id": "rhacm-2:rhacm2/search-rhel8" }, "product_reference": "rhacm2/search-rhel8", "relates_to_product_reference": "rhacm-2" }, { "category": "default_component_of", "full_product_name": { "name": "rhai-tech-preview/assisted-installer-agent-rhel8 as a component of OpenShift Container Platform 4.13", "product_id": "rhai-1:rhai-tech-preview/assisted-installer-agent-rhel8" }, "product_reference": "rhai-tech-preview/assisted-installer-agent-rhel8", "relates_to_product_reference": "rhai-1" }, { "category": "default_component_of", "full_product_name": { "name": "rhai-tech-preview/assisted-installer-reporter-rhel8 as a component of OpenShift Container Platform 4.13", "product_id": "rhai-1:rhai-tech-preview/assisted-installer-reporter-rhel8" }, "product_reference": "rhai-tech-preview/assisted-installer-reporter-rhel8", "relates_to_product_reference": "rhai-1" }, { "category": "default_component_of", "full_product_name": { "name": "rhai-tech-preview/assisted-installer-rhel8 as a component of OpenShift Container Platform 4.13", "product_id": "rhai-1:rhai-tech-preview/assisted-installer-rhel8" }, "product_reference": "rhai-tech-preview/assisted-installer-rhel8", "relates_to_product_reference": "rhai-1" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-41089", "cwe": { "id": "CWE-552", "name": "Files or Directories Accessible to External Parties" }, "discovery_date": "2021-09-27T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhacm-2:rhacm2/agent-service-rhel8", "rhacm-2:rhacm2/assisted-installer-agent-rhel8", "rhacm-2:rhacm2/assisted-installer-reporter-rhel8", "rhacm-2:rhacm2/assisted-installer-rhel8", "rhacm-2:rhacm2/multicluster-operators-subscription-release-rhel8", "rhacm-2:rhacm2/search-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-rhel8" ] } ], "notes": [ { "category": "other", "text": "In OpenShift Container Platform (OCP), Migration Toolkit for Virtualization (MTV) and Red Hat Quay some components bundle github.com/moby/moby, but successful exploitation requires using a specially crafted container, therefore impact to these components is LOW.", "title": "Statement" }, { "category": "description", "text": "A file permissions vulnerability was found in Moby (Docker Engine). Copying files by using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host's filesystem, which might lead to permissions escalation and allow an attacker access to restricted data.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "mtv-2.2.virtualization::el8:migration-toolkit-virtualization/mtv-controller-rhel8-0:2.2.0-39" ], "known_affected": [ "mtv-2.virtualization:migration-toolkit-virtualization/mtv-controller-rhel8", "openshift-4:openshift-compliance-openscap-container", "openshift-4:openshift-file-integrity-operator-container", "quay-3.10:quay/quay-builder-rhel8", "quay-3.12:quay/quay-builder-rhel8", "quay-3.13:quay/quay-builder-rhel8", "quay-3.14:quay/quay-builder-rhel8", "quay-3.15:quay/quay-builder-rhel8", "quay-3.9:quay/quay-builder-rhel8", "rhacm-2:rhacm-assisted-service-container", "rhacm-2:rhacm2/multicluster-operators-subscription-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-agent-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-reporter-rhel8", "rhel-7-els.els:docker.src" ], "known_not_affected": [ "rhacm-2:rhacm2/agent-service-rhel8", "rhacm-2:rhacm2/assisted-installer-agent-rhel8", "rhacm-2:rhacm2/assisted-installer-reporter-rhel8", "rhacm-2:rhacm2/assisted-installer-rhel8", "rhacm-2:rhacm2/multicluster-operators-subscription-release-rhel8", "rhacm-2:rhacm2/search-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-rhel8" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-41089" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41089" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-41089" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "openshift-4:openshift-compliance-openscap-container", "openshift-4:openshift-file-integrity-operator-container" ] }, { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "rhai-1:rhai-tech-preview/assisted-installer-agent-rhel8", "rhel-7-els.els:docker.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "mtv-2.virtualization:migration-toolkit-virtualization/mtv-controller-rhel8", "quay-3.10:quay/quay-builder-rhel8", "quay-3.12:quay/quay-builder-rhel8", "quay-3.13:quay/quay-builder-rhel8", "quay-3.14:quay/quay-builder-rhel8", "quay-3.15:quay/quay-builder-rhel8", "quay-3.9:quay/quay-builder-rhel8", "rhacm-2:rhacm-assisted-service-container", "rhacm-2:rhacm2/multicluster-operators-subscription-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-reporter-rhel8" ] }, { "category": "vendor_fix", "date": "2021-12-09T19:19:24+00:00", "details": "Apply advisory RHEA-2021:5066 as per vendors instructions.", "product_ids": [ "mtv-2.2.virtualization::el8:migration-toolkit-virtualization/mtv-controller-rhel8-0:2.2.0-39" ], "url": "https://access.redhat.com/errata/RHEA-2021:5066" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM" }, "products": [ "mtv-2.2.virtualization::el8:migration-toolkit-virtualization/mtv-controller-rhel8-0:2.2.0-39", "mtv-2.virtualization:migration-toolkit-virtualization/mtv-controller-rhel8", "openshift-4:openshift-compliance-openscap-container", "openshift-4:openshift-file-integrity-operator-container", "quay-3.10:quay/quay-builder-rhel8", "quay-3.12:quay/quay-builder-rhel8", "quay-3.13:quay/quay-builder-rhel8", "quay-3.14:quay/quay-builder-rhel8", "quay-3.15:quay/quay-builder-rhel8", "quay-3.9:quay/quay-builder-rhel8", "rhacm-2:rhacm-assisted-service-container", "rhacm-2:rhacm2/agent-service-rhel8", "rhacm-2:rhacm2/assisted-installer-agent-rhel8", "rhacm-2:rhacm2/assisted-installer-reporter-rhel8", "rhacm-2:rhacm2/assisted-installer-rhel8", "rhacm-2:rhacm2/multicluster-operators-subscription-release-rhel8", "rhacm-2:rhacm2/multicluster-operators-subscription-rhel8", "rhacm-2:rhacm2/search-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-agent-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-reporter-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-rhel8", "rhel-7-els.els:docker.src" ] } ], "threats": [ { "category": "impact", "details": "Low", "product_ids": [ "mtv-2.virtualization:migration-toolkit-virtualization/mtv-controller-rhel8", "openshift-4:openshift-compliance-openscap-container", "openshift-4:openshift-file-integrity-operator-container", "quay-3.10:quay/quay-builder-rhel8", "quay-3.12:quay/quay-builder-rhel8", "quay-3.13:quay/quay-builder-rhel8", "quay-3.14:quay/quay-builder-rhel8", "quay-3.15:quay/quay-builder-rhel8", "quay-3.9:quay/quay-builder-rhel8", "rhacm-2:rhacm-assisted-service-container", "rhacm-2:rhacm2/agent-service-rhel8", "rhacm-2:rhacm2/assisted-installer-agent-rhel8", "rhacm-2:rhacm2/assisted-installer-reporter-rhel8", "rhacm-2:rhacm2/assisted-installer-rhel8", "rhacm-2:rhacm2/multicluster-operators-subscription-release-rhel8", "rhacm-2:rhacm2/multicluster-operators-subscription-rhel8", "rhacm-2:rhacm2/search-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-agent-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-reporter-rhel8", "rhai-1:rhai-tech-preview/assisted-installer-rhel8" ] }, { "category": "impact", "details": "Moderate", "product_ids": [ "mtv-2.2.virtualization::el8:migration-toolkit-virtualization/mtv-controller-rhel8-0:2.2.0-39", "rhel-7-els.els:docker.src" ] } ], "title": "`docker cp` allows unexpected chmod of host file" } ] }