Security Advisory

CVE-2024-1725

6.5
MEDIUM

Vulnerability Description

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.
Published Date March 7, 2024
Official Source NIST NVD Advisory