CVE-2019-19350

Summary

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Affected Software

VendorProductVersion RangeStatus
n/aopenshift/ansible-service-brokeras shipped in Red Hat Openshift 4 and 3.11affected

Weaknesses

  • CWE-266: CWE-266

ADP Enrichment

CVE Program Container

Additional References

References