CVE-2019-19354CWE-266

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4

published March 24, 2021

CVSS
—
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2021-03-24T16:19Z
EPSS history
Timeline
  • 24 MAR 16:19Z
    An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4
    cvelistv5