Vulnerabilities > CVE-2024-1725 - Unspecified vulnerability in Redhat products

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
redhat
NVD
Published: 2024-03-07
Updated: 2025-03-11

Summary

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.

Vulnerable Configurations

Part Description Count
Application
Redhat
15

References