Every CVE Search/ Get API key

CVE-2019-3884

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able...

3.6 LowFix available

CVE-2019-3884 is a low vulnerability (CVSS 3.6) in Red Hat Atomic-openshift, published August 1, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.62%, the 49th percentile. Fixed in openshift 0:4.7.0-202102060108.p0.git.97095.7271b90.el7.

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
Low

Exploit likelihood

0.62%Up 0.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 3.6

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Record
CVE-2019-3884
CVSS 3.0
3.6 LowCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Weakness
CWE-290
Updated
2026-11-02
EUVDEUVD-2019-13494 3.6

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Record
EUVD-2019-13494
CVSS 3.0
3.6 LowCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-fpgq-qv2c-6787 5.4

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able...

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Record
GHSA-fpgq-qv2c-6787
CVSS 3.0
5.4 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Weakness
CWE-287, CWE-290
Updated
2026-11-02
NVD 5.4

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Record
CVE-2019-3884
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS 3.0
3.6 LowCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-290, CWE-287
Updated
2026-11-02
OSV 5.4

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Record
CVE-2019-3884
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:5634 8.6

Red Hat Security Advisory: OpenShift Container Platform 4.7.0 packages security update

Record
RHSA-2020:5634
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openshift
Red Hat:openshift:4.7::el7
 before 0:4.7.0-202102060108.p0.git.97095.7271b90.el7
0:4.7.0-202102060108.p0.git.97095.7271b90.el7
openshift-hyperkube
Red Hat:openshift:4.7::el7
 before 0:4.7.0-202102060108.p0.git.97095.7271b90.el7
0:4.7.0-202102060108.p0.git.97095.7271b90.el7
openshift
Red Hat:openshift:4.7::el8
 before 0:4.7.0-202102060108.p0.git.97095.7271b90.el8
0:4.7.0-202102060108.p0.git.97095.7271b90.el8
openshift-hyperkube
Red Hat:openshift:4.7::el8
 before 0:4.7.0-202102060108.p0.git.97095.7271b90.el8
0:4.7.0-202102060108.p0.git.97095.7271b90.el8
python-rsa
Red Hat:openshift:4.7::el8
 before 0:4.7-1.el8
0:4.7-1.el8
python3-rsa
Red Hat:openshift:4.7::el8
 before 0:4.7-1.el8
0:4.7-1.el8
ignition
Red Hat:openshift:4.7::el8
 before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8
0:2.9.0-2.rhaos4.7.git1d56dc8.el8
ignition-debuginfo
Red Hat:openshift:4.7::el8
 before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8
0:2.9.0-2.rhaos4.7.git1d56dc8.el8
ignition-debugsource
Red Hat:openshift:4.7::el8
 before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8
0:2.9.0-2.rhaos4.7.git1d56dc8.el8
ignition-validate
Red Hat:openshift:4.7::el8
 before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8
0:2.9.0-2.rhaos4.7.git1d56dc8.el8
Show 11 moreShow less
Affected packages
PackageAffectedFixed
ignition-validate-debuginfo
Red Hat:openshift:4.7::el8
 before 0:2.9.0-2.rhaos4.7.git1d56dc8.el8
0:2.9.0-2.rhaos4.7.git1d56dc8.el8
cri-o
Red Hat:openshift:4.7::el7
 before 0:1.20.0-0.rhaos4.7.git8921e00.el7.51
0:1.20.0-0.rhaos4.7.git8921e00.el7.51
cri-o-debuginfo
Red Hat:openshift:4.7::el7
 before 0:1.20.0-0.rhaos4.7.git8921e00.el7.51
0:1.20.0-0.rhaos4.7.git8921e00.el7.51
cri-tools
Red Hat:openshift:4.7::el7
 before 0:1.18.0-3.el7
0:1.18.0-3.el7
cri-tools-debuginfo
Red Hat:openshift:4.7::el7
 before 0:1.18.0-3.el7
0:1.18.0-3.el7
cri-o
Red Hat:openshift:4.7::el8
 before 0:1.20.0-0.rhaos4.7.git8921e00.el8.51
0:1.20.0-0.rhaos4.7.git8921e00.el8.51
cri-o-debuginfo
Red Hat:openshift:4.7::el8
 before 0:1.20.0-0.rhaos4.7.git8921e00.el8.51
0:1.20.0-0.rhaos4.7.git8921e00.el8.51
cri-o-debugsource
Red Hat:openshift:4.7::el8
 before 0:1.20.0-0.rhaos4.7.git8921e00.el8.51
0:1.20.0-0.rhaos4.7.git8921e00.el8.51
cri-tools
Red Hat:openshift:4.7::el8
 before 0:1.20.0-1.el8
0:1.20.0-1.el8
cri-tools-debuginfo
Red Hat:openshift:4.7::el8
 before 0:1.20.0-1.el8
0:1.20.0-1.el8
cri-tools-debugsource
Red Hat:openshift:4.7::el8
 before 0:1.20.0-1.el8
0:1.20.0-1.el8

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open