Rawfile Localpv
Approved changes feed: RSS · Atom
cpe:2.3:a:openebs:rawfile-localpv:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Openebs (077653a8-9a53-5291-8ea6-5e1295f14c4a) |
|---|---|
| Product | Rawfile Localpv (04d08569-5b2f-5c81-a2d8-0e9206d2d390) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58061 |
vulnerable | 2026-06-08 07:35:17.005268 |
OpenEBS Local PV RawFile persistent volume data is world readable
MEDIUM (5.5)
OpenEBS Local PV RawFile allows dynamic deployment of Stateful Persistent Node-Local Volumes & Filesystems for Kubernetes. Prior to version 0.10.0, persistent volume data is world readable and that would allow non-privileged users to access sensitive data such as databases of k8s workload. The rawfile-localpv storage class creates persistent volume data under /var/csi/rawfile/ on Kubernetes hosts by default. However, the directory and data in it are world-readable. It allows non-privileged users to access the whole persistent volume data, and those can include sensitive information such as a whole database if the Kubernetes tenants are running MySQL or PostgreSQL in a container so it could lead to a database breach. This issue has been patched in version 0.10.0.
Published: 2025-08-28T22:03:35.698Z
Updated: 2025-08-29T13:24:03.484Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.