CVE-2022-1798: Path Traversal vulnerability in Kubevirt
A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. /proc/self/<> is not accessible.
Other sources
An arbitrary file read vulnerability was found in the kubeVirt API. This flaw makes it possible to use the kubeVirt API to provide access to host files (like /etc/passwd, for example) in a KubeVirt VM as a disk device that can be written to and read from.
The kubeVirt API is affected by an arbitrary file read vulnerability. It is possible to use the KubeVirt API to provide access to host files (like /etc/passwd for example) in a KubeVirt VM as a disk device that can be written to and read from.
— Red Hat
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID for this KubeVirt vulnerability?
The vulnerability ID for this KubeVirt vulnerability is CVE-2022-1798.
What is the severity of CVE-2022-1798?
CVE-2022-1798 has a severity level of high.
Which versions of KubeVirt are affected by CVE-2022-1798?
CVE-2022-1798 affects KubeVirt versions up to 0.56 (and 0.55.1) on all platforms.
How does CVE-2022-1798 allow an attacker to read arbitrary files?
CVE-2022-1798 allows an attacker to read arbitrary files on the host filesystem that are publicly readable or readable for UID 107 or GID 107.
Is the /proc/self/<> path accessible in CVE-2022-1798?
No, the /proc/self/<> path is not accessible in CVE-2022-1798.