CVE-2022-0552CWE-444

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was…

published April 11, 2022

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content. This flaw affects origin-aggregated-logging versions 3.11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01176 · 67.3th percentile
Weakness
CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Published
2022-04-11T19:38Z
EPSS history
Timeline
  • 11 APR 19:38Z
    A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was…
    cvelistv5