CVE-2019-3884 LOW

CVE-2019-3884

Vendor Red Hat
Product atomic-openshift
Weakness CWE-290
Published August 1, 2019
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

3.6/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

What the vulnerability does

01Description

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Key dates

02Disclosure timeline

August 1, 2019 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-1524 A local user can be impersonated when using federated authentication with Silent JIT Provisioning. CVE-2020-11015 Device Authentication Vulnerability in thinx-device-api IoT Device Management Server CVE-2025-59385 QTS, QuTS hero CVE-2023-51667 WordPress Rate my Post – WP Rating System plugin <= 3.4.2 - Broken Access Control vulnerability CVE-2024-25906 WordPress Comments Like Dislike plugin <= 1.2.2 - IP Restriction Bypass Vulnerability vulnerability