Red Hat Security AdvisoryRHSA-2022:6681
OpenShift Virtualization 4.9.6 Images security and bug fix update
Released 2022-09-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- CNV 4.9 for RHEL 8 container-native-virtualization/virt-api, container-native-virtualization/virt-artifacts-server, container-native-virtualization/virt-controller +3
Fixes 1 record
Priority HIGH 71
A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or whic…
CVSS 3.1HIGH 8.7· Local · Low privileges · No interaction · EPSS 0.00376 · Published 2022-09-15 · Fixed in 0.55.1, 0.56.0 CWE-20