CVE-2019-19353

published 2021-03-24

CVE-2019-19353: An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. An attacker with…

high 7 CVSS 3.1

AV L AC H PR L UI N S U C H I H A H

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
operator-framework	hive	—	—
redhat	openshift_container_platform	—	—

CWE-266