RHSA-2026:59109
Vulnerability from csaf_redhat - Published: 2026-08-24 14:42 - Updated: 2026-08-26 16:36Summary
Red Hat Security Advisory: OpenShift Virtualization v4.19 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.19 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.19 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as sufficient to authorize cloning the contents of any PVC the caller can name, without requiring write access to the source namespace. A user or service account bound to the view role, commonly granted cluster-wide via ClusterRoleBinding, who also has ordinary write access (edit/admin) to any single namespace, can use this to exfiltrate the contents of any PVC in the cluster into a namespace they control, bypassing namespace isolation and the read-only guarantee of the view role.
7.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x | — |
Workaround
|
Threats
Impact
Important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.19 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.19 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:59109",
"url": "https://access.redhat.com/errata/RHSA-2026:59109"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-17527",
"url": "https://access.redhat.com/security/cve/CVE-2026-17527"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59109.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.19 Images",
"tracking": {
"current_release_date": "2026-08-26T16:36:38+00:00",
"generator": {
"date": "2026-08-26T16:36:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:59109",
"initial_release_date": "2026-08-24T14:42:58+00:00",
"revision_history": [
{
"date": "2026-08-24T14:42:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-24T14:43:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-26T16:36:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.19",
"product": {
"name": "Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-apiserver-rhel9@sha256%3Afe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9\u0026tag=1787242757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-cloner-rhel9@sha256%3Af5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9\u0026tag=1787232439"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-controller-rhel9@sha256%3A4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9\u0026tag=1787233642"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-importer-rhel9@sha256%3Ae1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9\u0026tag=1787235477"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-operator-rhel9@sha256%3A39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9\u0026tag=1787234290"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadproxy-rhel9@sha256%3Af90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9\u0026tag=1787234916"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadserver-rhel9@sha256%3Aa46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9\u0026tag=1787237523"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-apiserver-rhel9@sha256%3A005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9\u0026tag=1787242757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-cloner-rhel9@sha256%3A67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9\u0026tag=1787232439"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-controller-rhel9@sha256%3A34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9\u0026tag=1787233642"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-importer-rhel9@sha256%3A721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9\u0026tag=1787235477"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-operator-rhel9@sha256%3A4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9\u0026tag=1787234290"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadproxy-rhel9@sha256%3A05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9\u0026tag=1787234916"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadserver-rhel9@sha256%3A61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9\u0026tag=1787237523"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-apiserver-rhel9@sha256%3Aa54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9\u0026tag=1787242757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-cloner-rhel9@sha256%3A0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9\u0026tag=1787232439"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-controller-rhel9@sha256%3A3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9\u0026tag=1787233642"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-importer-rhel9@sha256%3A819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9\u0026tag=1787235477"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-operator-rhel9@sha256%3A08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9\u0026tag=1787234290"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadproxy-rhel9@sha256%3A8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9\u0026tag=1787234916"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x",
"product_id": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadserver-rhel9@sha256%3Aee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9\u0026tag=1787237523"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64 as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x as a component of Red Hat Container Native Virtualization 4.19",
"product_id": "Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-17527",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"discovery_date": "2026-07-27T08:41:37.809000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507413"
}
],
"notes": [
{
"category": "description",
"text": "In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI\u0027s DataVolume clone authorization accepts this permission as sufficient to authorize cloning the contents of any PVC the caller can name, without requiring write access to the source namespace. A user or service account bound to the view role, commonly granted cluster-wide via ClusterRoleBinding, who also has ordinary write access (edit/admin) to any single namespace, can use this to exfiltrate the contents of any PVC in the cluster into a namespace they control, bypassing namespace isolation and the read-only guarantee of the view role.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated ClusterRole grants create on datavolumes/source, allowing unauthorized PVC clone",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is confirmed upstream in kubevirt/containerized-data-importer and affects all downstream consumers using CDI\u0027s default aggregated RBAC roles, including OpenShift Virtualization. It is distinct from the SSP operator\u0027s \"golden images\" pattern, which deliberately and correctly scopes an equivalent permission via a namespace-scoped Role/RoleBinding.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-17527"
},
{
"category": "external",
"summary": "RHBZ#2507413",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507413"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-17527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-17527"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17527",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17527"
}
],
"release_date": "2026-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T14:42:58+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:59109"
},
{
"category": "workaround",
"details": "Until a fix is available, cluster administrators should avoid granting cdi.kubevirt.io:view (or the built-in Kubernetes view role, which aggregates it) via cluster-wide ClusterRoleBinding. Prefer namespace-scoped RoleBindings, and audit which namespaces grant both view-equivalent access and separate edit/admin access to the same identities, since that combination is what enables cross-namespace data exfiltration.",
"product_ids": [
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:005bc530d7a9d6eca19305c16c2348923b3df159979d982cf52b9005de9e5612_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:a54d063411650a1342801e14910b13439b20583f79364d6fc190235979693947_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:fe7da88523d4731e9eddabb9c8446a35066d14e5bb9b3097bf08715d3d949b80_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:0b12e0088cc376423c44e60bb9137b431734bb5a35fd5c8ba7bf70d944bc3283_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:67b1627c5b3df1f7414aef113ae99afaafc5b4b557028855747416bbca44aa11_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-cloner-rhel9@sha256:f5e44f26a53a97e1ecb1a4a58846cd85118456dec9ccf50f2f1eb3156acc9855_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:34c6397760646b3cdcc5772d18d38fab6da5aad6110bc7fd980c75401eeda8a9_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:3515f791c7ec45aa203c2d1f7fc84081ea818c3a03c3dc06296fccb0d0332695_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-controller-rhel9@sha256:4e370261b7553189216233d57c6fe03b2fe7d8dd427ae44c4b90671f29e5b966_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:721a9cf861e335bee499460835858a636d0c120858b4ef99f4a4fc6c96f7955d_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:819ebeeb3f069c714538cc8b8c597389a7dbe5a0d166eb9bbd08642ff27d1052_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-importer-rhel9@sha256:e1673280768a92f5a9b7ac6e9576a3095e06ebe43e45374625b1252ed2f236b6_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:08226a343c7b6cff75522701b3b579f97ab66fd6d687756030708a878ace94ca_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:39e15a6648fa551da9c8779d9067e68746de0e1ec39fb0f5cea7d0670d9c57f6_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-operator-rhel9@sha256:4ba97ce15b28e248b5bbe655c7a69245797da4cbc0b5a03359b2fd6c97485f7f_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:05b64e83c24f284099cab26c833787bcf285b6f602effad67d3f7d2330ade855_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:8840c8447cc1789d0461f86e9147f0359217a18c297362f05c9166a8904661a0_s390x",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:f90d0f1e2ef5cd252ceaee8d97be3c92f43391f82c50f190e763ec585da6ed6f_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:61ac0e3ade40a224879cb358c1121e57d093b37784b6522eabc73cc66b3cd9a9_arm64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:a46584fa4a7b986aa986f7070a5ce5b275a6dc4f36672075da6f3f35b53636eb_amd64",
"Red Hat Container Native Virtualization 4.19:registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:ee027a811905e245c274499fc434c9553b115d084d30adf02ff30de560c0c6d1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated ClusterRole grants create on datavolumes/source, allowing unauthorized PVC clone"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…