CVE-2022-1677CWE-400

In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster…

published September 1, 2022

CVSS
—
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster router's HAProxy configuration files. This malformed entry can match any arbitrary hostname, or all hostnames in the cluster, and direct traffic to an arbitrary application within the cluster, including one under attacker control.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00583 · 47.1th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-09-01T19:51Z
EPSS history
Timeline
  • 01 SEP 19:51Z
    In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster…
    cvelistv5