Operator-Framework Presto vulnerabilities

1 known vulnerability affecting operator-framework/presto.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-19352HIGHCVSS 7.0vas shipped in Red Hat Openshift 42021-03-24

CVE-2019-19352 [HIGH] CWE-266 CVE-2019-19352: An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/p An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.