Access Control Flaw in KubeVirt Virt-Handler Affects Red Hat Products
CVE-2020-1701

6.5MEDIUM

Key Information:

Vendor

Kubevirt

Status
Virt-handler
Vendor
CVE Published:
27 May 2021

What is CVE-2020-1701?

A security vulnerability exists in the KubeVirt virt-handler, where improper access permissions allow an attacker with the ability to create virtual machines (VMs) to attach and read any secret stored within their namespace. This flaw can lead to unauthorized exposure of sensitive data, compromising the integrity and confidentiality of the system. It is essential to implement appropriate versions post-0.26.0 to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

virt-handler kubevirt 0.26.0

References

https://bugzilla.redhat.com/show_bug.cgi?id=1792092
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.