Vulnerabilities > CVE-2019-19349 - Incorrect Privilege Assignment vulnerability in Redhat Openshift 4.0
Attack vector
LOCAL Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |