Read the docs

kubevirt

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

kubevirt records in CISA KEV

No kubevirt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kubevirt 18 records HIGH Containerized-data-importer 1 record LOW Containerized Data Importer 1 record LOW

Records

1 record in Containerized Data Importer · all components

TI-2019-02853 CVE-2019-3841 · GHSA-3685-xxgw-jp8h

Improper certificate validation in kubevirt/virt-cdi-importer

Priority LOW 33

Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.00531 Published 2019-03-25 No fix listed CWE-295
Open these records in search →