What is CVE-2019-14819?

CVE-2019-14819 is a high-severity vulnerability in [Red Hat] Openshift-Ansible, classified under Incorrect Privilege Assignment. CVSS score: 8.8/10. Published 2020-01-07.

How severe is CVE-2019-14819?

High severity. CVSS v3 base score is 8.8 out of 10.

Privilege escalation in [Red Hat] Openshift-Ansible

CVE-2019-14819

A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to those allowed by the privileged Security Context Constraints.

Published 2020-01-07 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.011 (63.0th percentile), scored 2026-09-30.

Low probability of exploitation in the next 30 days, but still tracked. 63rd percentile — 63.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000

Affected products

[Red Hat] Openshift-Ansible — versions 3.x
Red Hat Openshift Container Platform — versions 3.10, 3.11

Weakness classification (CWE)

References

bugzilla.redhat.com/show_bug.cgi (Exploit, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2019-14819?: CVE-2019-14819 is a high-severity vulnerability in [Red Hat] Openshift-Ansible, classified under Incorrect Privilege Assignment. CVSS score: 8.8/10. Published 2020-01-07.
How severe is CVE-2019-14819?: High severity. CVSS v3 base score is 8.8 out of 10.