Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-19335
HistoryMar 18, 2020 - 4:15 p.m.

Design/Logic Flaw

2020-03-1816:15:00
PRIOn knowledge base
www.prio-n.com
3

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

During installation of an OpenShift 4 cluster, the openshift-install command line tool creates an auth directory, with kubeconfig and kubeadmin-password files. Both files contain credentials used to authenticate to the OpenShift API server, and are incorrectly assigned word-readable permissions. ose-installer as shipped in Openshift 4.2 is vulnerable.

CPENameOperatorVersion
openshifteq4.2
openshifteq4.0

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

Related for PRION:CVE-2019-19335