Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2024-33394

An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component.

VectorLOCAL

PublishedMay 02, 2024, 18:15

Published Bycve@mitre.org

Base Score

Score5.9

Package (Ecosystem)IntroducedFixedLimit

kubevirt.io/kubevirt(Go)0N/AN/A

CWE-94

Base Score

5.9

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL