Back to bug 2153802

Who When What Removed Added
Sage McTaggart 2022-12-15 14:25:03 UTC CC admiller, extras-orphan, go-sig, zebob.m
Sage McTaggart 2022-12-15 14:26:54 UTC Alias CVE-2022-4516
Summary openshift: kube-apiserver: authentication bypass using websockets CVE-2022-4516 openshift: kube-apiserver: authentication bypass using websockets
CC dfreiber, jburrell, rogbas, vkumar
Sage McTaggart 2022-12-15 14:27:02 UTC Depends On 2153806, 2153805, 2153803, 2153804
Sage McTaggart 2022-12-15 14:27:17 UTC Depends On 2153807, 2153810, 2153808, 2153809
RaTasha Tillery-Smith 2022-12-15 15:45:09 UTC Doc Text A flaw was found in OpenShift kube-apiserver, allowing a user to exec into a pod where they do not have permissions to. This can result in a loss of confidentiality and integrity. A flaw was found in OpenShift kube-apiserver. This flaw allows a user to exec into a pod for which they do not have permission, resulting in a loss of confidentiality and integrity.
Sage McTaggart 2022-12-20 13:56:31 UTC Summary CVE-2022-4516 openshift: kube-apiserver: authentication bypass using websockets openshift: kube-apiserver: authentication bypass using websockets
Alias CVE-2022-4516
Ke Wang 2022-12-21 06:31:52 UTC Doc Type --- If docs needed, set a value
CC kewang
Docs Contact dpunia
Andy Bartlett 2023-01-12 10:00:20 UTC CC andbartl
Ben Luddy 2023-04-04 15:47:23 UTC CC bluddy
Red Hat Bugzilla 2023-07-07 08:34:03 UTC Assignee security-response-team nobody

Back to bug 2153802