← CVE Intelligence

CVE-2022-1798

Path Traversal vulnerability in Kubevirt PUBLISHED

Description (CNA)

A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. /proc/self/<> is not accessible.

Affected (CNA)

Vendor / productVersions
Google LLC / Kubevirtaffected unspecified before 0.55.1; affected unspecified before 0.56.0

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.