Non notée
CVE-2022-1632 An Improper Certificate Validation attack was found in Openshift
Description
An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Openshift | 4.8.17 | Pas de correctif indiqué |
Autres CVE de Openshift
Les 12 CVE de Openshift →
CVE-2022-4145
A content spoofing flaw was found in OpenShift's OAuth endpoint
4.3
Moyenne
CVE-2023-3089
A compliance problem was found in the Red Hat OpenShift Container Platform
7.0
Élevée
CVE-2022-3259
Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks
7.4
Élevée
CVE-2022-3262
A flaw was found in Openshift
8.1
Élevée