Operator-Framework Hadoop vulnerabilities

1 known vulnerability affecting operator-framework/hadoop.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-19354HIGHCVSS 7.8vas shipped in Red Hat Openshift 42021-03-24

CVE-2019-19354 [HIGH] CWE-266 CVE-2019-19354: An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/h An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.