Total vulnerabilities in the database
A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.
| Software | From | Fixed in |
|---|---|---|
| redhat / openshift_container_platform | 4.13 | 4.13.x |
| redhat / openshift_container_platform | 4.14 | 4.14.x |
| redhat / openshift_container_platform | 4.15 | 4.15.x |
| redhat / openshift_container_platform_for_arm64 | 4.15 | 4.15.x |
| redhat / openshift_container_platform_for_ibm_z | 4.15 | 4.15.x |
| redhat / openshift_container_platform_for_linuxone | 4.15 | 4.15.x |
| redhat / openshift_container_platform_for_power | 4.15 | 4.15.x |
| redhat / openshift_container_platform_for_power | 4.13 | 4.13.x |
| redhat / openshift_container_platform_for_linuxone | 4.13 | 4.13.x |
| redhat / openshift_container_platform_for_ibm_z | 4.13 | 4.13.x |
| redhat / openshift_container_platform_for_arm64 | 4.13 | 4.13.x |
| redhat / openshift_container_platform_for_power | 4.14 | 4.14.x |
| redhat / openshift_container_platform_for_linuxone | 4.14 | 4.14.x |
| redhat / openshift_container_platform_for_ibm_z | 4.14 | 4.14.x |
| redhat / openshift_container_platform_for_arm64 | 4.14 | 4.14.x |