CVE-2019-10175
CVE-2019-10175
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.5EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
28 jun 2019Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determine whether the requesting user has permission to access the Persistent Volume Claim (PVC) in the source namespace. This could allow users to clone any PVC in the cluster into their own namespace, effectively allowing access to other user's data.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
KubeVirt · containerized-data-importer¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →