CVE-2019-3884: red hat atomic-openshift Authentication Bypass by Spoofing
Vulnerability summary
CVE-2019-3884 is a medium (CVSS 5.4) Authentication Bypass by Spoofing vulnerability in red hat atomic-openshift. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 49.7% of scored vulnerabilities.
Not severe (CVSS 3.6, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 01-08-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST3.6LowCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
EPSS trend
Probability
0.62%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.62% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-290Authentication Bypass by SpoofingThis attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Red hat1 product
- atomic-openshift3.6, 3.7, 3.8, 3.9, 3.10, 3.11, 4.1
Redhat1 product
- openshiftEOL3.6 | 3.7 | 3.8 | 3.9 | 3.10 | 3.11 | 4.1
2 vendors · 2 products