Skip to content
OpenAdvisories
Unscored CVE-2019-19349 EUVD-2019-8970GHSA-m38r-3f3j-r43x

An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped i…

Published Mar 24, 2021 · Updated Aug 5, 2024 · Assigned by redhat

Description

An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Affected products

VendorProductAffectedFixed
— operator-framework/operator-metering as shipped in Red Hat Openshift 4 —

References