Operator-Framework Operator-Metering vulnerabilities

1 known vulnerability affecting operator-framework/operator-metering.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-19349HIGHCVSS 7.8vas shipped in Red Hat Openshift 42021-03-24

CVE-2019-19349 [HIGH] CWE-266 CVE-2019-19349: An insecure modification vulnerability in the /etc/passwd file was found in the container operator-f An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.