CVE-2019-19346 - openshift/mariadb-apb: /etc/passwd is given incorrect privileges

Back Back to CVE browser

HIGH

openshift/mariadb-apb: /etc/passwd is given incorrect privileges

Published Apr 2, 2020

7.0

HIGH

CVSS 3.1

EPSS 0.26%

Description

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.

Affected products

Vendor Openshift Enterprise Product Openshift/mariadb-Apb Default
n/a
- Version
  Fixed in 3.11.188-4
  Status
  affected
  Constraints
  -
- Version
  Fixed in 4.1.37-202003021622
  Status
  affected
  Constraints
  -
- Version
  Fixed in 4.2.21-202002240343
  Status
  affected
  Constraints
  -
- Version
  Fixed in 4.3.5-202003020549
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Openshift Enterprise

Openshift/mariadb-Apb

n/a

Version	Status	Constraints
Fixed in 3.11.188-4	affected	-
Fixed in 4.1.37-202003021622	affected	-
Fixed in 4.2.21-202002240343	affected	-
Fixed in 4.3.5-202003020549	affected	-

Red Hat OpenShift Container Platform 3.11

openshift3/mariadb-apb:v3.11.188-4

Fixed · RHSA-2020:0802
Red Hat OpenShift Container Platform 4.1

openshift4/apb-base:v4.1.37-202003021622

Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1

openshift4/mariadb-apb:v4.1.37-202003021622

Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1

openshift4/mediawiki-apb:v4.1.37-202003021622

Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1

openshift4/mediawiki:v4.1.37-202003021622

Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1

openshift4/mysql-apb:v4.1.37-202003021622

Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1

openshift4/postgres-apb:v4.1.37-202003021622

Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1

openshift4/postgresql-apb:v4.1.37-202003021622

Fixed · RHSA-2020:0694
Red Hat OpenShift Container Platform 4.2

openshift4/apb-base:v4.2.21-202002240343

Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2

openshift4/mariadb-apb:v4.2.21-202002240343

Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2

openshift4/mediawiki-apb:v4.2.21-202002240343

Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2

openshift4/mysql-apb:v4.2.21-202002240343

Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2

openshift4/postgres-apb:v4.2.21-202002240343

Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2

openshift4/postgresql-apb:v4.2.21-202002240343

Fixed · RHSA-2020:0617
Red Hat OpenShift Container Platform 4.3

openshift4/apb-base:v4.3.5-202003020549

Fixed · RHSA-2020:0681
Red Hat OpenShift Container Platform 4.3

openshift4/mariadb-apb:v4.3.5-202003020549

Fixed · RHSA-2020:0681
Red Hat OpenShift Container Platform 4.3

openshift4/mysql-apb:v4.3.5-202003020549

Fixed · RHSA-2020:0681
Red Hat OpenShift Container Platform 4.3

openshift4/postgres-apb:v4.3.5-202003020549

Fixed · RHSA-2020:0681
Red Hat OpenShift Container Platform 4.3

openshift4/postgresql-apb:v4.3.5-202003020549

Fixed · RHSA-2020:0681

Product	Package	State	Advisory
Red Hat OpenShift Container Platform 3.11	openshift3/mariadb-apb:v3.11.188-4	Fixed	RHSA-2020:0802
Red Hat OpenShift Container Platform 4.1	openshift4/apb-base:v4.1.37-202003021622	Fixed	RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1	openshift4/mariadb-apb:v4.1.37-202003021622	Fixed	RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1	openshift4/mediawiki-apb:v4.1.37-202003021622	Fixed	RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1	openshift4/mediawiki:v4.1.37-202003021622	Fixed	RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1	openshift4/mysql-apb:v4.1.37-202003021622	Fixed	RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1	openshift4/postgres-apb:v4.1.37-202003021622	Fixed	RHSA-2020:0694
Red Hat OpenShift Container Platform 4.1	openshift4/postgresql-apb:v4.1.37-202003021622	Fixed	RHSA-2020:0694
Red Hat OpenShift Container Platform 4.2	openshift4/apb-base:v4.2.21-202002240343	Fixed	RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2	openshift4/mariadb-apb:v4.2.21-202002240343	Fixed	RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2	openshift4/mediawiki-apb:v4.2.21-202002240343	Fixed	RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2	openshift4/mysql-apb:v4.2.21-202002240343	Fixed	RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2	openshift4/postgres-apb:v4.2.21-202002240343	Fixed	RHSA-2020:0617
Red Hat OpenShift Container Platform 4.2	openshift4/postgresql-apb:v4.2.21-202002240343	Fixed	RHSA-2020:0617
Red Hat OpenShift Container Platform 4.3	openshift4/apb-base:v4.3.5-202003020549	Fixed	RHSA-2020:0681
Red Hat OpenShift Container Platform 4.3	openshift4/mariadb-apb:v4.3.5-202003020549	Fixed	RHSA-2020:0681
Red Hat OpenShift Container Platform 4.3	openshift4/mysql-apb:v4.3.5-202003020549	Fixed	RHSA-2020:0681
Red Hat OpenShift Container Platform 4.3	openshift4/postgres-apb:v4.3.5-202003020549	Fixed	RHSA-2020:0681
Red Hat OpenShift Container Platform 4.3	openshift4/postgresql-apb:v4.3.5-202003020549	Fixed	RHSA-2020:0681

Remediation

Red Hat statement

By default this vulnerability is not exploitable in un-privilieged containers running on OpenShift Container Platform. This is because the system call SETUID and SETGID is blocked by the default seccomp policy.

Weaknesses (2)

CWE-266

Incorrect Privilege Assignment

CWE-269

Improper Privilege Management

References (5)

https://access.redhat.com/security/cve/CVE-2019-19346
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1793289
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19346
x_refsource_CONFIRMIssue TrackingVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19346
https://www.cve.org/CVERecord?id=CVE-2019-19346

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2019-19346		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1793289		Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19346		x_refsource_CONFIRMIssue TrackingVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19346
https://www.cve.org/CVERecord?id=CVE-2019-19346