CVE-2019-19350CWE-266

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11

published March 24, 2021

CVSS
—
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2021-03-24T15:36Z
EPSS history
Timeline
  • 24 MAR 15:36Z
    An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11
    cvelistv5