CVE-2020-1701: 
NixOS vulnerability analysis and mitigation

A security vulnerability (CVE-2020-1701) was identified in KubeVirt's virt-handler component versions prior to 0.26.0. The vulnerability relates to access permissions of virt-handler, where an attacker with VM creation privileges could potentially access and read the contents of any secret within their namespace (NVD, RedHat Bugzilla).

The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-732 (Incorrect Permission Assignment for Critical Resource). The issue specifically relates to the access permissions configuration in the virt-handler daemonset clusterroles (NVD).

The primary impact of this vulnerability is the potential exposure of sensitive information. An attacker with VM creation privileges could attach and read the contents of any secret within their namespace, potentially compromising confidential data (RedHat Bugzilla).

The vulnerability requires an attacker to have access to create VMs within the affected namespace. The attack vector is network-accessible with low attack complexity and requires low privileges (NVD).

The vulnerability was addressed in KubeVirt version 0.26.0. The only recommended mitigation is to update to this version or later, as no alternative workarounds meet the security criteria for ease of use, deployment, and stability (RedHat Bugzilla).