A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2024-03-07T20:09:11.616Z
Updated: 2024-09-16T18:36:16.272Z
Reserved: 2024-02-21T20:27:59.807Z
Link: CVE-2024-1725
Vulnrichment
Updated: 2024-08-01T18:48:21.831Z
NVD
Status : Awaiting Analysis
Published: 2024-03-07T20:15:50.690
Modified: 2024-05-08T02:15:09.067
Link: CVE-2024-1725
Redhat