CVE-2024-31419

Summary

CVE-2024-31419 is a newly discovered information disclosure vulnerability affecting OpenShift Virtualization. The issue stems from the default activation of the DownwardMetrics feature, which allows virtual machine guests to access limited host metrics. This unintended exposure puts any guest in any namespace at risk of gaining insights into host metrics, potentially leading to privacy concerns for organizations using OpenShift Virtualization. Organizations are advised to disable the DownwardMetrics feature unless explicitly required for their use case to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.