What is the vulnerability ID for this insecure modification vulnerability in /etc/passwd file?

The vulnerability ID for this insecure modification vulnerability in /etc/passwd file is CVE-2019-19350.

What is the severity level of CVE-2019-19350?

The severity level of CVE-2019-19350 is high with a CVSS score of 7.8.

Which software versions are affected by CVE-2019-19350?

CVE-2019-19350 affects Red Hat Openshift 4 and 3.11.

How can an attacker exploit CVE-2019-19350?

An attacker with access to the container could exploit CVE-2019-19350 to modify the /etc/passwd file and escalate their privileges.

Are there any references available for CVE-2019-19350?

Yes, you can find references for CVE-2019-19350 at the following links: [Bugzilla Red Hat - CVE-2019-19350](https://bugzilla.redhat.com/show_bug.cgi?id=1791534), [Bugzilla Red Hat - CVE-2019-19350](https://bugzilla.redhat.com/show_bug.cgi?id=1793283), [Bugzilla Red Hat - CVE-2019-19350](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1791534)

Vulnerability/
CVE-2019-19350

high

7.8

CWE

266

21/1/2020

24/3/2021

5/8/2024

CVE-2019-19350

First published: Tue Jan 21 2020(Updated: )

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 and 3.11. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
Redhat Openshift	=3.11
Redhat Openshift	=4.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID for this insecure modification vulnerability in /etc/passwd file?
The vulnerability ID for this insecure modification vulnerability in /etc/passwd file is CVE-2019-19350.
What is the severity level of CVE-2019-19350?
The severity level of CVE-2019-19350 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2019-19350?
CVE-2019-19350 affects Red Hat Openshift 4 and 3.11.
How can an attacker exploit CVE-2019-19350?
An attacker with access to the container could exploit CVE-2019-19350 to modify the /etc/passwd file and escalate their privileges.
Are there any references available for CVE-2019-19350?
Yes, you can find references for CVE-2019-19350 at the following links: [Bugzilla Red Hat - CVE-2019-19350](https://bugzilla.redhat.com/show_bug.cgi?id=1791534), [Bugzilla Red Hat - CVE-2019-19350](https://bugzilla.redhat.com/show_bug.cgi?id=1793283), [Bugzilla Red Hat - CVE-2019-19350](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1791534)

agent/type
collector/nvd-index
agent/software-canonical-lookup-request
agent/weakness
agent/severity
agent/author
agent/references
agent/softwarecombine
agent/description
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/tags
agent/event
collector/redhat-bugzilla
source/Red Hat
alias/CVE-2019-19350
vendor/redhat
canonical/redhat openshift
version/redhat openshift/3.11
version/redhat openshift/4.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.