Vulnerabilities > CVE-2019-19353 - Incorrect Privilege Assignment vulnerability in Redhat Openshift Container Platform 4.0
Attack vector
LOCAL Attack complexity
HIGH Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |