← Back

Kubevirt

kubevirt

21 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Kubevirt
kubevirt
19 CVEs
Containerized Data Importer
containerized_data_importer
2 CVEs

CVEs (21)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-3841
1Kubevirt
1Containerized Data Importer
Jun 17, 2026
Mar 25, 2019
N/A· v4
6.8 MEDIUM· v3
4.9 MEDIUM· v2
Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries. This could enable man-in-the-middle attacks betw...Show more
Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries. This could enable man-in-the-middle attacks between a container registry and the virt-cdi-component, leading to possible undetected tampering of trusted container image content.Show less