A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-1725.json"
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.15"
}
]
}
]