CVE-2019-3884CWE-290

A vulnerability exists in the garbage collection mechanism of atomic-openshift

Low · published August 1, 2019

CVSS v3.0
3.6
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

The record
Technical detail
CVSS v3.0
3.6 · LOW
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00620 · 49.0th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2019-08-01T13:20Z
EPSS history
Timeline
  • 01 AUG 13:20Z
    A vulnerability exists in the garbage collection mechanism of atomic-openshift
    cvelistv5