CVE-2019-19349CWE-266
An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift…
published March 24, 2021
What it is
An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00339 · 26.1th percentile
- Weakness
- CWE-266 · Incorrect Privilege Assignment
- Published
- 2021-03-24T15:32Z
EPSS history
Timeline