Lucene search
HistorySep 15, 2022 - 4:15 p.m.
CVE-2022-1798
kubevirt
path traversal
vulnerability
arbitrary files
host filesystem
publicly readable
uid 107
gid 107
/proc/self/<>
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
26.5%
A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. /proc/self/<> is not accessible.
Affected configurations
Node
kubevirtkubevirtRange0.20.0–0.55.1kubernetes
Related
osv
osv
KubeVirt arbitrary host file read from the VM
2022-08-18 19:02:18
CVE-2022-1798
2022-09-15 16:15:10
veracode
veracode
Information Disclosure
2022-08-19 04:19:15
github
github
Duplicate Advisory: KubeVirt arbitrary host file read from the VM
2022-08-18 19:02:18
prion
prion
Path traversal
2022-09-15 16:15:00
cve
cve
CVE-2022-1798
2022-09-15 16:15:10
gitlab
gitlab
Relative Path Traversal
2022-08-18 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: kubevirt (CVE-2022-1798)
2023-03-28 00:00:00
redhatcve
redhatcve
CVE-2022-1798
2022-08-18 03:38:30
cbl_mariner
cbl_mariner
CVE-2022-1798 affecting package kubevirt for versions less than 0.55.1-1
2022-10-05 23:33:41
cvelist
cvelist
CVE-2022-1798 Path Traversal vulnerability in Kubevirt
2022-09-15 15:45:12
redhat
redhat
openvas
openvas
openSUSE: Security Advisory for kubevirt, (SUSE-SU-2022:3333-1)
2022-09-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3333-1)
2022-09-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3321-1)
2022-09-21 00:00:00
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
26.5%
Related for NVD:CVE-2022-1798