Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-19354

Опубликовано: 24 мар. 2021
Источник: nvd
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
Версия от 4.4 (включая) до 4.4.3 (исключая)

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 15%
0.00047
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-266
CWE-269

Связанные уязвимости

CVSS3: 7
redhat
около 6 лет назад

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

CVSS3: 7.8
github
больше 3 лет назад

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

EPSS

Процентиль: 15%
0.00047
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-266
CWE-269