Red Hat Security Advisory

RHSA-2022:6351

OpenShift Virtualization 4.10.5 Images security and bug fix update

Released 2022-09-06 · Red Hat rating Important · View on Red Hat →

Fixed in

CNV 4.10 for RHEL 8 container-native-virtualization/hostpath-csi-driver, container-native-virtualization/hostpath-csi-driver-rhel8

Fixes 2 records

TI-2022-01664 CVE-2022-1798

Path Traversal vulnerability in Kubevirt

HIGH 71

A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or whic…

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.00376 Published 2022-09-15 Fixed in 0.55.1, 0.56.0 CWE-20

TI-2022-01851 CVE-2022-1996 · GHSA-r48q-9g5r-8q2h

Authorization Bypass Through User-Controlled Key in emicklei/go-restful

MEDIUM 45

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03115 Published 2022-06-06 Partial fix · v3.8.0, 3.8.0 +1 CWE-639