{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"state": "REJECTED", "cveId": "CVE-2022-2220", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "dateUpdated": "2025-02-13T15:46:20.015Z", "dateRejected": "2023-02-12T00:00:00", "dateReserved": "2022-06-27T00:00:00.000Z", "datePublished": "2022-08-31T15:32:59.279Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2023-02-12T00:00:00.000Z"}, "rejectedReasons": [{"lang": "en", "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."}]}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."}], "id": "CVE-2022-2220", "lastModified": "2023-11-07T03:46:18.703", "metrics": {}, "published": "2022-08-31T16:15:10.890", "references": [], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Rejected"}

{"acknowledgement": "This issue was discovered by Luiza Nacshon (Red Hat Product Security) and Thibault Guittet (Red Hat Product Security).", "bugzilla": {"description": "openshfit-router: fails to verify subdomain ownership which can lead to route takeover", "id": "2101434", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2101434"}, "csaw": false, "cvss3": {"cvss3_base_score": "0.0", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N", "status": "draft"}, "cwe": "CWE-863->CWE-1220", "details": ["Insufficient Granularity of Access Control in an OpenShift router causes improper subdomain ownership verification, allowing route takeover. Once a custom route is created, the user must update the DNS provider by creating a canonical name (CNAME) record to expose this route externally. The CNAME record should point the custom domain to the OpenShift router as the alias. If the CNAME is not removed when the route is not in use anymore, there is a dangling route that a malicious actor may take over."], "name": "CVE-2022-2220", "package_state": [{"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Not affected", "package_name": "atomic-openshift", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Not affected", "package_name": "openshift3/ose-haproxy-router", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift4/ose-cluster-ingress-rhel9-operator", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift4/ose-haproxy-router", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2022-06-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-2220\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-2220"], "statement": "Red Hat Product Security does not consider this to be a vulnerability. It is not in the scope of the ingress controller to manage external dns records. It is the cluster administrator's responsibility to manage DNS records and to secure sensitive routes using TLS."}