CVE-2024-1725 — Kubevirt-csi: persistentvolume allows access to hcp's root node
A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the r…
Published: 2024-03-07 · CVSS: 6.5 · CVSS 3.1
A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7