vulnerability

Red Hat OpenShift: CVE-2019-19351: openshift/jenkins: /etc/passwd is given incorrect privileges

Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
Feb 26, 2020
Added
Feb 26, 2020
Modified
Aug 11, 2025

Description

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/jenkins-slave-base-rhel7-containera as shipped in Openshift 4 and 3.11.

Solution

linuxrpm-upgrade-jenkins-slave-base
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.