Red Hat Security AdvisoryRHSA-2022:6890
OpenShift Virtualization 4.8.7 Images bug fixes and security update
Released 2022-10-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- CNV 4.8 for RHEL 8 container-native-virtualization/vm-import-operator-rhel8
Fixes 1 record
Priority HIGH 71
A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or whic…
CVSS 3.1HIGH 8.7· Local · Low privileges · No interaction · EPSS 0.00376 · Published 2022-09-15 · Fixed in 0.55.1, 0.56.0 CWE-20