Skip to content
OpenAdvisories
Unscored CVE-2019-19350 EUVD-2019-8971GHSA-gjp6-48wm-m8cr

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Open…

Published Mar 24, 2021 · Updated Aug 5, 2024 · Assigned by redhat

Description

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Affected products

VendorProductAffectedFixed
— openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11 —

References