kubevirt/containerized-data-importer

Releases165

Frequency2 weeks 3 days

Last Release 3 months ago

Stars521

Data Import Service for kubernetes, designed with kubevirt in mind.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-3841 ↗	Mar 25, 2019Monday, 25 March 2019, 18:29	—	4.9 MEDIUM
Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries. This could enable man-in-the-middle attacks between a container registry and the virt-cdi-component, leading to possible undetected tampering of trusted container image content.