RHSA-2026:59062
Vulnerability from csaf_redhat - Published: 2026-08-24 13:54 - Updated: 2026-08-26 16:36Summary
Red Hat Security Advisory: OpenShift Virtualization v4.21 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.21 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as sufficient to authorize cloning the contents of any PVC the caller can name, without requiring write access to the source namespace. A user or service account bound to the view role, commonly granted cluster-wide via ClusterRoleBinding, who also has ordinary write access (edit/admin) to any single namespace, can use this to exfiltrate the contents of any PVC in the cluster into a namespace they control, bypassing namespace isolation and the read-only guarantee of the view role.
7.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x | — |
Workaround
|
Threats
Impact
Important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.21 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:59062",
"url": "https://access.redhat.com/errata/RHSA-2026:59062"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-17527",
"url": "https://access.redhat.com/security/cve/CVE-2026-17527"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59062.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.21 Images",
"tracking": {
"current_release_date": "2026-08-26T16:36:34+00:00",
"generator": {
"date": "2026-08-26T16:36:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:59062",
"initial_release_date": "2026-08-24T13:54:42+00:00",
"revision_history": [
{
"date": "2026-08-24T13:54:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-24T13:55:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T16:36:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.21",
"product": {
"name": "Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.21::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-apiserver-rhel9@sha256%3A965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9\u0026tag=1787231965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-cloner-rhel9@sha256%3A62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9\u0026tag=1787232589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-controller-rhel9@sha256%3A3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9\u0026tag=1787232221"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-importer-rhel9@sha256%3A119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9\u0026tag=1787238164"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-operator-rhel9@sha256%3A0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9\u0026tag=1787235286"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadproxy-rhel9@sha256%3A2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9\u0026tag=1787232781"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadserver-rhel9@sha256%3Ab60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9\u0026tag=1787234707"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-apiserver-rhel9@sha256%3A071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9\u0026tag=1787231965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-cloner-rhel9@sha256%3A9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9\u0026tag=1787232589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-controller-rhel9@sha256%3Ab9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9\u0026tag=1787232221"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-importer-rhel9@sha256%3Ad7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9\u0026tag=1787238164"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-operator-rhel9@sha256%3A4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9\u0026tag=1787235286"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadproxy-rhel9@sha256%3A113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9\u0026tag=1787232781"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadserver-rhel9@sha256%3Ac943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9\u0026tag=1787234707"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-apiserver-rhel9@sha256%3A20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9\u0026tag=1787231965"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-cloner-rhel9@sha256%3Afe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9\u0026tag=1787232589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-controller-rhel9@sha256%3A2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9\u0026tag=1787232221"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-importer-rhel9@sha256%3A117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9\u0026tag=1787238164"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-operator-rhel9@sha256%3A6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9\u0026tag=1787235286"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadproxy-rhel9@sha256%3A0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9\u0026tag=1787232781"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadserver-rhel9@sha256%3Af744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9\u0026tag=1787234707"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64 as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x as a component of Red Hat Container Native Virtualization 4.21",
"product_id": "Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.21"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-17527",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"discovery_date": "2026-07-27T08:41:37.809000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507413"
}
],
"notes": [
{
"category": "description",
"text": "In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI\u0027s DataVolume clone authorization accepts this permission as sufficient to authorize cloning the contents of any PVC the caller can name, without requiring write access to the source namespace. A user or service account bound to the view role, commonly granted cluster-wide via ClusterRoleBinding, who also has ordinary write access (edit/admin) to any single namespace, can use this to exfiltrate the contents of any PVC in the cluster into a namespace they control, bypassing namespace isolation and the read-only guarantee of the view role.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated ClusterRole grants create on datavolumes/source, allowing unauthorized PVC clone",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is confirmed upstream in kubevirt/containerized-data-importer and affects all downstream consumers using CDI\u0027s default aggregated RBAC roles, including OpenShift Virtualization. It is distinct from the SSP operator\u0027s \"golden images\" pattern, which deliberately and correctly scopes an equivalent permission via a namespace-scoped Role/RoleBinding.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-17527"
},
{
"category": "external",
"summary": "RHBZ#2507413",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507413"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-17527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-17527"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17527",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17527"
}
],
"release_date": "2026-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T13:54:42+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:59062"
},
{
"category": "workaround",
"details": "Until a fix is available, cluster administrators should avoid granting cdi.kubevirt.io:view (or the built-in Kubernetes view role, which aggregates it) via cluster-wide ClusterRoleBinding. Prefer namespace-scoped RoleBindings, and audit which namespaces grant both view-equivalent access and separate edit/admin access to the same identities, since that combination is what enables cross-namespace data exfiltration.",
"product_ids": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:071f6c1caaf82935fb7f0709ec9c03be9dbd64738124e299bc2c17ba8aef827c_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:20c0e046c9329bb64f983bbb3dd49ffa4fbb1b5dd66ea14300cb2a91de98689d_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:965ee691a1112b57688bfa7a2d619449ca0af3af2f460e0db6989009f600668e_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:62f95d0d5f619f1ff5a80410b4ce7c9b217b787bae05a04272f39e4b2ead724c_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:9ca6a56bfd179acaf9e941947f0791906b5f35ea1f2e0f89071a07f553ea0c09_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:fe0ab78d62dc836c3f046ab34c9ed50d3603bd4abfe0e3ad149e6b6f1973662e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:2382533ee9efe120ee8c0b05827cb9d371de362a6a18ecc0e84948c3064a2ec9_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3f7160dc2f5b96a293b42cff47e054fc426cd546b597c743984d9e57b8fec119_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:b9a5bcfcc65c85992fb5ff23442b4f709b3c051df57f99c4df3d6f40b75e4290_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:117eef7977c0fda7260fdadc758016e7d60509d322779d0a4e7326576c53671e_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:119979fd6fe89df5752a3b2d4dea463cd787f2ee354f10d66046ab68aa5f3fc6_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:d7d6b4e9ed0c578353be257888bdb8bd91b3afcc14939a82bce2b39e520b53e3_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:0c881c0a7dfdaf03eb897b5a9d7a7d49cd9034a3f02669ac73faddbba67d5c21_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4fee1fa0df0dadf74dfddb93f038149acf8d603c04f85aea20b97af91520bff8_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:6fb09f2089047cc80fc9fe570817ab0ac3c21309161e9aead552c0a73035084f_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:0987e907d4186e63a8e3a635b25582640efd5ba0ec1a74e0de4255c0bc49dabb_s390x",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:113cc14f4c74cbd32ab4aa1b297ef17c7eab63c52a61a57c120ebc8de8bf9fa5_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:2a121e50d354964e7786d8663ae41faf414260ca788cd197bdce430bbf041a1d_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:b60a27c934bdf9ce1413cd503e428272037ef85dfeda6de97e4c9034474b2869_amd64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:c943c6b8213851c7eac79eab7e3ce5d7984a343dfcc2fbf8827aed1d457b0c0b_arm64",
"Red Hat Container Native Virtualization 4.21:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:f744a38680946041c530078e94d3709823a29c68815ae46706c96bff7b203009_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated ClusterRole grants create on datavolumes/source, allowing unauthorized PVC clone"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…