CVE-2019-19349

CVE-2019-19349 describes an insecure modification vulnerability in the /etc/passwd file within the container operator-framework/operator-metering as shipped in Red Hat OpenShift 4 . An attacker with access to the container could modify /etc/passwd and escalate privileges. The connected documents ...

CVE-2019-19349

An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...