Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An attacker with access to create VMs could attach any secret within their namespace, allowing them to read the contents of that secret.
CVSS Information
N/A
Vulnerability Type
关键资源的不正确权限授予
Vulnerability Title
KubeVirt 安全漏洞
Vulnerability Description
Kubevirt是一款虚拟机管理器。 KubeVirt 0.26.0之前存在安全漏洞，该漏洞源于具有创建vm权限的攻击者可利用该漏洞可以在其名称空间中附加任何秘密，从而允许他们读取该秘密的内容。
CVSS Information
N/A
Vulnerability Type
N/A