Openshift Ansible-Service-Broker vulnerabilities

1 known vulnerability affecting openshift/ansible-service-broker.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-19350HIGHCVSS 7.8vas shipped in Red Hat Openshift 4 and 3.112021-03-24

CVE-2019-19350 [HIGH] CWE-266 CVE-2019-19350: An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-se An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.