github.com/kubevirt/csi-driver

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.5

CVE-2024-1725

Kubevirt-csi: persistentvolume allows access to hcp's root node

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches t…

Red Hat Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.15 Red Hat OpenShift Container Platform 4.13 Go

Mar 7, 2024