VULNERABILITY INTELLIGENCE

CVE-2019-14819

CVSS score8.8 HIGH

EPSS probability1.07%

CISA KEVNot currently listed

Published2020-01-07

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to those allowed by the privileged Security Context Constraints.

Weakness classification

CWE-266: Incorrect Privilege Assignment
CWE-269: Improper Privilege Management
CWE-270: Privilege Context Switching Error

Primary references

secalert@redhat.com — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory