CVE-2019-19346

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Score

CVSS 3.1 7.0 High

Status

Modified - secalert@redhat.com

Published

2020-04-02

Last modified

2024-08-05

Weaknesses

CWE-266, CWE-269

Affected products

• Openshiftmariadb-apb (Openshift Enterprise)
• Openshift (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19346