Логотип exploitDog
bind:CVE-2024-1725
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-1725

Количество 3

Количество 3

redhat логотип

CVE-2024-1725

почти 2 года назад

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2024-1725

почти 2 года назад

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-fg9q-5cw2-p6r9

почти 2 года назад

kubevirt-csi: PersistentVolume allows access to HCP's root node

CVSS3: 8.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2024-1725

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.

CVSS3: 6.5
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-1725

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.

CVSS3: 6.5
0%
Низкий
почти 2 года назад
github логотип
GHSA-fg9q-5cw2-p6r9

kubevirt-csi: PersistentVolume allows access to HCP's root node

CVSS3: 8.1
0%
Низкий
почти 2 года назад

Уязвимостей на страницу