| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/kubevirt/csi-driver | < 0.0.0-202403081943-cc28dcbb0afc14all versions | 0.0.0-202403081943-cc28dcbb0afc14 |
| openshift container platform | = 4.13= 4.14= 4.15 | |
| openshift container platform for arm64 | = 4.13= 4.14= 4.15 | |
| openshift container platform for ibm z | = 4.13= 4.14= 4.15 | |
| openshift container platform for linuxone | = 4.13= 4.14= 4.15 | |
| openshift container platform for power | = 4.13= 4.14= 4.15 |
A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free