CVE-2019-10225

6.3 mediumEPSS 0.6%

A flaw was found in atomic-openshift of openshift-4.2 where the basic-user RABC role in OpenShift Container Platform doesn't sufficiently protect the GlusterFS StorageClass against leaking of the restuserkey. An attacker with basic-user permissions is able to obtain the value of restuserkey, and use it to authenticate to the GlusterFS REST service, gaining access to read, and modify files.

Severity

CVSS 3.1

6.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2021-03-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:openshift
redhat:openshift_container_platform

References

https://bugzilla.redhat.com/show_bug.cgi?id=1743073
https://bugzilla.redhat.com/show_bug.cgi?id=1743073

Check your stack JSON