Bug 2072188 (CVE-2022-3248)
Summary: | CVE-2022-3248 kubernetes: OpenShift API admission checks does not enforce "custom-host" permissions | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Pedro Sampaio <psampaio> |
Component: | vulnerability | Assignee: | Nobody <nobody> |
Status: | NEW --- | QA Contact: | |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | bcoca, bdettelb, bmontgom, caswilli, cmeyers, crarobin, davidn, dfreiber, dhalasz, epacific, fjansen, gblomqui, gparvin, jburrell, jcammara, jhardy, jkoehler, jmadigan, jmitchel, jneedle, jobarker, joelsmith, jokerman, jtanner, jwong, kaycoth, kshier, mabashia, maszulik, ngough, njean, notting, nstielau, osapryki, owatkins, pahickey, pamccart, relrod, rfreiman, rogbas, rpetrell, sdoran, security-response-team, simaishi, smcdonal, sponnaga, stcannon, sthirugn, teagle, tkuratom, vkrizan, vkumar, vmugicag, xxia, yguenane, zsadeh |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: |
A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied.
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | Type: | --- | |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 2101532, 2101753, 2101531, 2112757, 2112758 | ||
Bug Blocks: | 2075610, 2128432 |
Description
Pedro Sampaio
2022-04-05 18:35:01 UTC
|