CVE-2022-1798
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-1798
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-1798.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-1798
- Related
- Withdrawn
- 2024-05-08T06:51:44.798204Z
- Published
- 2022-09-15T16:15:10Z
- Modified
- 2023-11-28T23:04:13.232995Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. /proc/self/<> is not accessible.
- References
Affected packages
Git / github.com/kubevirt/kubevirt
Affected versions
v0.*
v0.20.0
v0.21.0
v0.22.0
v0.23.0
v0.24.0
v0.25.0
v0.25.0-rc.0
v0.26.0
v0.26.0-rc.0
v0.26.1
v0.27.0
v0.27.0-rc.0
v0.28.0
v0.28.0-rc.0
v0.28.0-rc.1
v0.28.0-rc.2
v0.29.0
v0.29.0-rc.0
v0.29.0-rc.1
v0.30.0
v0.30.0-rc.0
v0.30.0-rc.1
v0.30.0-rc.2
v0.30.0-rc.3
v0.30.0-rc.4
v0.31.0
v0.31.0-rc.1
v0.32.0-rc.1
v0.33.0-rc.0
v0.34.0-rc.0
v0.35.0
v0.35.0-rc.0
v0.36.0-rc.0
v0.37.0-rc.0
v0.38.0
v0.38.0-rc.0
v0.39.0-rc.0
v0.40.0-rc.0
v0.41.0-rc.0
v0.42.0
v0.42.0-rc.0
v0.43.0-rc.0
v0.43.1-rc.1
v0.44.0
v0.44.0-rc.0
v0.45.0
v0.45.0-rc.0
v0.46.0
v0.46.0-rc.0
v0.47.0-rc.0
v0.48.0
v0.48.0-rc.0
v0.49.0
v0.49.0-rc.0
v0.50.0
v0.50.0-rc.0
v0.51.0
v0.51.0-rc.0
v0.52.0
v0.52.0-rc.0
v0.53.0
v0.53.0-rc.0
v0.54.0
v0.54.0-rc.0
v0.55.0
v0.55.0-rc.0