CVE-2019-19352CWE-266

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4

published March 24, 2021

CVSS
—
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00255 · 16.1th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2021-03-24T16:02Z
EPSS history
Timeline
  • 24 MAR 16:02Z
    An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4
    cvelistv5