We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)
Bugpilot (Bug tracking)

Ok

THREATINT CVE Home CVE Diag Help
PUBLISHED

CVE-2024-31419

Cnv: information disclosure through the usage of vm-dump-metrics

Reserved:2024-04-03
Published:2024-04-03
Updated:2024-04-03

Description

An information disclosure flaw was found in OpenShift Virtualization. The DownwardMetrics feature was introduced to expose host metrics to virtual machine guests and is enabled by default. This issue could expose limited host metrics of a node to any guest in any namespace without being explicitly enabled by an administrator.



MEDIUM: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Problem types

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Product status

4.15.1
unaffected

Default status
affected

Timeline

2024-04-03:Reported to Red Hat.
2024-04-03:Made public.

References

https://access.redhat.com/security/cve/CVE-2024-31419 vdb-entry

https://bugzilla.redhat.com/show_bug.cgi?id=2272948 (RHBZ#2272948) issue-tracking

cve.org CVE-2024-31419

nvd.nist.gov CVE-2024-31419

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-31419