CVE-2022-1798

🗓️ 15 Sep 2022 15:45:12Reported by GoogleType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 2002 Views

A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) allows reading arbitrary files on the host filesystem

Reporter	Title	Published	Views	Family All 33
CBLMariner	CVE-2022-1798 affecting package kubevirt for versions less than 0.55.1-1	5 Oct 202223:33	–	cbl_mariner
Circl	CVE-2022-1798	9 Aug 202200:43	–	circl
CNNVD	Red Hat OpenShift 路径遍历漏洞	7 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-1798 Path Traversal vulnerability in Kubevirt	15 Sep 202215:45	–	cvelist
EUVD	EUVD-2022-6544	3 Oct 202520:07	–	euvd
Github Security Blog	Duplicate Advisory: KubeVirt arbitrary host file read from the VM	18 Aug 202219:02	–	github
GitLab Advisory Database	Relative Path Traversal	18 Aug 202200:00	–	gitlab
Tenable Nessus	CBL Mariner 2.0 Security Update: kubevirt (CVE-2022-1798)	28 Mar 202300:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container (SUSE-SU-2022:3321-1)	21 Sep 202200:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container (SUSE-SU-2022:3333-1)	23 Sep 202200:00	–	nessus

NVD

Vulners

Node

kubevirt kubevirtRange0.20.0–0.55.1kubernetes

[
  {
    "platforms": [
      "all"
    ],
    "product": "Kubevirt",
    "vendor": "Google LLC",
    "versions": [
      {
        "lessThan": "0.55.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "0.56.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/kubevirt/kubevirt/security/advisories/GHSA-qv98-3369-g364

21 Nov 2024 06:41Current

7.3High risk

Vulners AI Score7.3

CVSS 3.16.5 - 8.7

EPSS0.0013

SSVC