CVE-2019-19346

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-266CWE-269

Affected software

VendorProductVersions
Openshift Enterpriseopenshift/mariadb-apbFixed in 4.3.5-202003020549; Fixed in 4.2.21-202002240343; Fixed in 4.1.37-202003021622; Fixed in 3.11.188-4

References

Timeline

Published
Apr 2, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-193487.0An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting versions before the CVE-2019-193497.8An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped inCVE-2019-19359.8A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data CVE-2019-193507.8An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat OpensCVE-2019-193517.0An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the CVE-2019-193527.0An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4.CVE-2019-193537.0An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. ACVE-2019-193547.8An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4.CVE-2019-193557.0An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access CVE-2019-193567.5Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability haCVE-2019-19367.2A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and CiCVE-2019-193626.5An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was
CVE-2019-19346: High severity, CVSS 7.0 | Vulnix