What’s Vulnerable › Vulnerabilities

CVE-2019-14819

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-01-07 · updated 2026-06-17
• Weakness: CWE-266

Description

A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to those allowed by the privileged Security Context Constraints.

Affected products

• Red Hat OpenShift Container Platform 4.18: 3.10, 3.11

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14819
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14819

Get alerted when CVE-2019-14819 or the next vulnerability affects your stack