CVE-2019-3884
- Source
- https://cve.org/CVERecord?id=CVE-2019-3884
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3884.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2019-3884
- Downstream
- Published
- 2019-08-01T14:15:13.190Z
- Modified
- 2026-07-08T17:17:26.568574Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.
- References
Affected packages
Git / github.com/openshift/origin
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openshift/origin
- Events
-
IntroducedLast affected
- Database specific
{ "cpe": [ "cpe:2.3:a:redhat:openshift:3.6:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:openshift:3.7:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:openshift:3.8:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:openshift:3.9:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:openshift:3.10:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:openshift:3.11:*:*:*:*:*:*:*", "cpe:2.3:a:redhat:openshift:4.1:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "extracted_events": [ { "introduced": "3.6" }, { "last_affected": "3.6" }, { "introduced": "3.7" }, { "last_affected": "3.7" }, { "introduced": "3.8" }, { "last_affected": "3.8" }, { "introduced": "3.9" }, { "last_affected": "3.9" }, { "introduced": "3.10" }, { "last_affected": "3.10" }, { "introduced": "3.11" }, { "last_affected": "3.11" }, { "introduced": "4.1" }, { "last_affected": "4.1" } ] }