Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-19345

Опубликовано: 20 мар. 2020
Источник: nvd
CVSS3: 7
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mediawiki-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:openshift:*:*:*:*:*:*:*:*
Версия от 4.0 (включая) до 4.3 (исключая)
cpe:2.3:a:redhat:openshift:3.11:*:*:*:*:*:*:*

EPSS

Процентиль: 12%
0.00041
Низкий

7 High

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-266
CWE-269

Связанные уязвимости

CVSS3: 7
redhat
около 6 лет назад

A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mediawiki-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

CVSS3: 7.8
github
больше 3 лет назад

A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mediawiki-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

EPSS

Процентиль: 12%
0.00041
Низкий

7 High

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-266
CWE-269
Уязвимость CVE-2019-19345