[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnn8cJ83y-K5wzf5PSp6t-JNtoWNT40Ke3fbV1141YxE":3,"g5a-risk:CVE-2019-9946":176},{"success":4,"data":5,"meta":174},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":35,"references":62,"referencesCount":35,"weaknesses":84,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":15,"otxData":15,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":172,"notableEvents":173},"CVE-2019-9946","What is CVE-2019-9946?","Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort\u002Fportmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.","Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI...","2019-04-02T18:30:26.583","2023-11-07T03:13:49.317",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":34,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.03159,[39,39,39,39,39,39,39],"High",[43,48,51,54,57],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"cncf","portmap","*","cpe:2.3:a:cncf:portmap:*:*:*:*:*:container_networking_interface:*:*",{"vendor":49,"product":49,"version":46,"criteria":50,"vulnerable":4},"kubernetes","cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",{"vendor":49,"product":49,"version":52,"criteria":53,"vulnerable":4},"1.13.6","cpe:2.3:a:kubernetes:kubernetes:1.13.6:beta0:*:*:*:*:*:*",{"vendor":49,"product":49,"version":55,"criteria":56,"vulnerable":4},"1.14.0","cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha0:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"netapp","cloud_insights","-","cpe:2.3:a:netapp:cloud_insights:-:*:*:*:*:*:*:*",[63,67,73,77,80],{"url":64,"source":65,"tags":66},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHBA-2019:0862","Red Hat",[],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fgithub.com\u002Fcontainernetworking\u002Fplugins\u002Fpull\u002F269#issuecomment-477683272","GitHub",[71,72],"Patch","Third Party Advisory",{"url":74,"source":75,"tags":76},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFCN66VYB3XS76SYH567SO7N3I254JOCT\u002F","Fedoraproject",[],{"url":78,"source":75,"tags":79},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FSGOOWAELGH3F7OXRBPH3HCNZELNLXYTW\u002F",[],{"url":81,"source":82,"tags":83},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20190416-0002\u002F","Netapp",[71,72],[85],{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":92},"CWE-670","Always-Incorrect Control Flow Implementation","The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.","This weakness captures cases in which a particular code segment is always incorrect with respect to the algorithm that it is implementing. For example, if a C programmer intends to include multiple statements in a single block but does not include the enclosing braces (CWE-483), then the logic is always incorrect. This issue is in contrast to most weaknesses in which the code usually behaves correctly, except when it is externally manipulated in malicious ways.","Draft","Class","Simple",1,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2019-9946? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-9946, a high severity cyber security vulnerability from 2019. Cloud Native Computing Foundation (CNCF) CNI (Container Netw...","CVE-2019-9946, CVE-2019-9946 vulnerability, CVE-2019-9946 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, cncf security, kubernetes security, netapp security, portmap vulnerability, kubernetes vulnerability, cloud_insights vulnerability","\u002Fwhat-is\u002Fcve-2019-9946",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-9946","Cybersecurity","CVE-2019-9946, CVE-2019-9946 vulnerability, CVE-2019-9946 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122,166],{"Operator":15,"Negate":15,"Nodes":123},[124],{"Operator":125,"Negate":15,"CPEMatch":126},"OR",[127,130,133,137,141,143,145,148,151,154,157,160,163],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":129,"VersionEndIncluding":15},"AAC9C18B-C6AB-43D0-8BD9-ACC4158DF9FD","0.7.5",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":131,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":132,"VersionEndIncluding":15},"ADC981F6-485E-4804-8BA2-640DA55FE1D9","1.11.9",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":134,"VersionStartExcluding":15,"VersionStartIncluding":135,"VersionEndExcluding":136,"VersionEndIncluding":15},"DDF6BA38-1A7C-46AB-A404-06ABB3ADFFC7","1.12.0","1.12.7",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":139,"VersionEndExcluding":140,"VersionEndIncluding":15},"147CD8D3-60A8-4314-AD92-670CB330F85C","1.13.0","1.13.5",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4CC774DD-08F0-4AC4-A0A9-67F86A7ED2E5",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"34A6AC2D-82C4-4E1F-8D9A-159E31A4F790",{"Vulnerable":4,"Criteria":146,"MatchCriteriaID":147,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha1:*:*:*:*:*:*","002991E8-6CC8-4F58-89B3-0B1AF2447DD5",{"Vulnerable":4,"Criteria":149,"MatchCriteriaID":150,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha2:*:*:*:*:*:*","9EA02FED-0377-4E4B-A86F-EE44F0E27360",{"Vulnerable":4,"Criteria":152,"MatchCriteriaID":153,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha3:*:*:*:*:*:*","1496A02B-29F5-4DD5-B9FE-B39C5B77E8CF",{"Vulnerable":4,"Criteria":155,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:kubernetes:kubernetes:1.14.0:beta0:*:*:*:*:*:*","59D7C9A1-A467-46A5-A03E-A04BD35287C7",{"Vulnerable":4,"Criteria":158,"MatchCriteriaID":159,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:kubernetes:kubernetes:1.14.0:beta1:*:*:*:*:*:*","41BF2E7F-E6DB-4ED0-B943-247B4F592C7E",{"Vulnerable":4,"Criteria":161,"MatchCriteriaID":162,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:kubernetes:kubernetes:1.14.0:beta2:*:*:*:*:*:*","EF0406C1-854E-4B4D-AC1E-7DE304356030",{"Vulnerable":4,"Criteria":164,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:kubernetes:kubernetes:1.14.0:rc1:*:*:*:*:*:*","300E9B49-446B-406C-B219-360BD97D6EC1",{"Operator":15,"Negate":15,"Nodes":167},[168],{"Operator":125,"Negate":15,"CPEMatch":169},[170],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":171,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"26FCA75B-4282-4E0F-95B4-640A82C8E91C",[],[],{"lastModified":11,"cacheTime":175,"version":32},1792344674906,{"score":177,"band":178,"action":179,"scoredAt":180},41,"Medium","Plan remediation","2026-10-16T06:45:52.396781+00:00"]