Lucene search

K
cvelistRedhatCVELIST:CVE-2019-19349
HistoryMar 24, 2021 - 3:32 p.m.

CVE-2019-19349

2021-03-2415:32:35
CWE-266
redhat
www.cve.org
1
cve-2019-19349
insecure modification
/etc/passwd
red hat openshift 4
privilege escalation

EPSS

0.001

Percentile

20.7%

An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

CNA Affected

[
  {
    "product": "operator-framework/operator-metering",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "as shipped in Red Hat Openshift 4"
      }
    ]
  }
]

EPSS

0.001

Percentile

20.7%

Related for CVELIST:CVE-2019-19349