CVE-2024-1725

Publication date

2024-03-07 20:09:11

Family

redhat

State

PUBLISHED

Description

A flaw was found in the kubevirt-csi component of OpenShift Virtualizations Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker nodes volume by creating a custom Persistent Volume that matches the name of a worker node.