CVE-2019-4415

CVE-2019-4415 affects IBM Cloud Private 3.1.1 and 3.1.2 where a local user can escalate privileges due to improper SecurityContextConstraints handling. The IBM security bulletin confirms icp-scc SCC is erroneously assigned to all pods, enabling privilege escalation. A remediation is provided for ...