CVE-2019-19346

🗓️ 02 Apr 2020 19:12:29Reported by redhatType

cve🔗 web.nvd.nist.gov👁 102 Views🌐 WEB

Insecure modification vulnerability in openshift/mariadb-ap

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2019-19346	3 Apr 202000:58	–	circl
CNVD	Unspecified Vulnerability in Red Hat OpenShift Container Platform (CNVD-2020-03939)	21 Jan 202000:00	–	cnvd
Cvelist	CVE-2019-19346	2 Apr 202019:12	–	cvelist
EUVD	EUVD-2019-8967	7 Oct 202500:30	–	euvd
NVD	CVE-2019-19346	2 Apr 202020:15	–	nvd
OSV	CVE-2019-19346	2 Apr 202020:15	–	osv
Prion	Design/Logic Flaw	2 Apr 202020:15	–	prion
RedhatCVE	CVE-2019-19346	21 Jan 202008:09	–	redhatcve
RedHat Linux	Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.2.21 security update	4 Mar 202005:48	–	redhat
RedHat Linux	Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.3.5 security update	10 Mar 202023:56	–	redhat

NVD

Vulners

Node

redhat openshiftRange<3.11.188-4

redhat openshiftRange4.0.0–4.1.37

redhat openshiftRange4.2.0–4.2.21

redhat openshiftRange4.3.0–4.3.5

[
  {
    "product": "openshift/mariadb-apb",
    "vendor": "Openshift Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 4.3.5-202003020549"
      },
      {
        "status": "affected",
        "version": "Fixed in 4.2.21-202002240343"
      },
      {
        "status": "affected",
        "version": "Fixed in 4.1.37-202003021622"
      },
      {
        "status": "affected",
        "version": "Fixed in 3.11.188-4"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Parameter	Position	Path	Description	CWE
passwd	path	/etc/passwd	Insecure modification of /etc/passwd inside the container allows privilege escalation.	CWE-269, CWE-266

21 Nov 2024 04:34Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.4

CVSS 3.17

EPSS0.00041