3.6 Low

CVE-2019-3884 A vulnerability exists in the garbage collection mechanism of atomic-openshift

Description

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Affected products and versions

Product	Affected versions	Fixed in
atomic-openshift	Versions not published

References

bugzilla.redhat.com bugzilla.redhat.com

Timeline

Published August 1, 2019
Last modified August 4, 2024

The 3 CVEs of atomic-openshift →

CVE-2019-3889 A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3,… 4.6 Medium CVE-2018-14632 An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift… 7.7 High

Track this CVE

CVE-2019-3884 A vulnerability exists in the garbage collection mechanism of atomic-openshift

Description

Affected products and versions

References

Timeline

Other CVEs of atomic-openshift