Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Kubevirt Subscribe
Filtered by product Containerized Data Importer
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-3841 1 Kubevirt 1 Containerized Data Importer 2019-10-09 4.9 MEDIUM 6.8 MEDIUM
Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries. This could enable man-in-the-middle attacks between a container registry and the virt-cdi-component, leading to possible undetected tampering of trusted container image content.