CVE-2022-1632CWE-295

An Improper Certificate Validation attack was found in Openshift

published September 1, 2022

CVSS
—
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.4th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2022-09-01T00:00Z
EPSS history
Timeline
  • 01 SEP 00:00Z
    An Improper Certificate Validation attack was found in Openshift
    cvelistv5