Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-19351

Опубликовано: 18 мар. 2020
Источник: nvd
CVSS3: 7
CVSS2: 4.4
EPSS Низкий

Описание

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:openshift:3.11:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.0011
Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-266
CWE-269

Связанные уязвимости

CVSS3: 7
redhat
около 6 лет назад

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.

CVSS3: 7
github
больше 3 лет назад

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.

EPSS

Процентиль: 30%
0.0011
Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-266
CWE-269
Уязвимость CVE-2019-19351