CVE-2019-19351: High severity red hat openshift vulnerability

Published Mar 18, 2020

Updated

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.

Affected Software

2 affected components

redhat Openshift=3.11

redhat Openshift=4.0

Event History

Mar 18, 2020

CVE Published

via MITRE·04:33 PM

Data Sourced

via MITRE·04:33 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-19351?

CVE-2019-19351 has a high severity level due to the potential for privilege escalation.

How do I fix CVE-2019-19351?

To fix CVE-2019-19351, update to the latest version of Red Hat OpenShift that addresses this vulnerability.

What are the affected versions for CVE-2019-19351?

CVE-2019-19351 affects Red Hat OpenShift versions 3.11 and 4.0.

Who can exploit CVE-2019-19351?

An attacker with access to the affected container can exploit CVE-2019-19351 to modify the /etc/passwd file.

What impact does CVE-2019-19351 have?

The impact of CVE-2019-19351 allows an attacker to escalate their privileges within the container.