CVE-2019-3884
Summary
| CVE | CVE-2019-3884 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2019-08-01 14:15:00 UTC |
|---|
| Updated | 2023-03-03 16:52:00 UTC |
|---|
| Description | A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| 1693905 – (CVE-2019-3884) CVE-2019-3884 atomic-openshift: cross-namespace owner references can trigger deletions of valid children |
MISC |
bugzilla.redhat.com |
|
| Red Hat Customer Portal |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| 1693905 – (CVE-2019-3884) CVE-2019-3884 atomic-openshift: cross-namespace owner references can trigger deletions of valid children |
CONFIRM |
bugzilla.redhat.com |
Issue Tracking, Vendor Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 770064 Red Hat OpenShift Container Platform 4.7.0 Packages and Security Update (RHSA-2020:5634)
