{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-3172", "assignerOrgId": "a6081bf6-c852-4425-ad4f-a67919267565", "state": "PUBLISHED", "assignerShortName": "kubernetes", "dateReserved": "2022-09-09T15:59:49.064Z", "datePublished": "2023-11-03T18:11:53.835Z", "dateUpdated": "2024-08-03T01:00:10.775Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "kube-apiserver", "repo": "https://github.com/kubernetes/kubernetes", "vendor": "Kubernetes", "versions": [{"status": "affected", "version": "v1.25.0"}, {"lessThanOrEqual": "v1.24.4", "status": "affected", "version": "v1.24.0", "versionType": "semver"}, {"lessThanOrEqual": "v1.23.10", "status": "affected", "version": "v1.23.0", "versionType": "semver"}, {"lessThanOrEqual": "v1.22.13", "status": "affected", "version": "v1.22.0", "versionType": "semver"}, {"status": "unaffected", "version": "v1.25.1"}, {"status": "unaffected", "version": "v1.24.5"}, {"status": "unaffected", "version": "v1.23.11"}, {"status": "unaffected", "version": "v1.22.14"}, {"lessThanOrEqual": "v1.21.14", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Nicolas Joly"}, {"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Weinong Wang"}], "datePublic": "2022-09-16T04:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A security issue was discovered in kube-apiserver that allows an \naggregated API server to redirect client traffic to any URL. This could\n lead to the client performing unexpected actions as well as forwarding \nthe client's API server credentials to third parties.<br>"}], "value": "A security issue was discovered in kube-apiserver that allows an \naggregated API server to redirect client traffic to any URL. This could\n lead to the client performing unexpected actions as well as forwarding \nthe client's API server credentials to third parties.\n"}], "impacts": [{"capecId": "CAPEC-560", "descriptions": [{"lang": "en", "value": "CAPEC-560 Use of Known Domain Credentials"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "a6081bf6-c852-4425-ad4f-a67919267565", "shortName": "kubernetes", "dateUpdated": "2023-11-03T18:11:53.835Z"}, "references": [{"tags": ["issue-tracking"], "url": "https://github.com/kubernetes/kubernetes/issues/112513"}, {"tags": ["mailing-list"], "url": "https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRak"}, {"url": "https://security.netapp.com/advisory/ntap-20231221-0005/"}], "source": {"discovery": "EXTERNAL"}, "title": "Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T01:00:10.775Z"}, "title": "CVE Program Container", "references": [{"tags": ["issue-tracking", "x_transferred"], "url": "https://github.com/kubernetes/kubernetes/issues/112513"}, {"tags": ["mailing-list", "x_transferred"], "url": "https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRak"}, {"url": "https://security.netapp.com/advisory/ntap-20231221-0005/", "tags": ["x_transferred"]}]}]}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*", "matchCriteriaId": "D740494E-6332-4421-BE43-C0CEB179CBA6", "versionEndIncluding": "1.21.14", "vulnerable": true}, {"criteria": "cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*", "matchCriteriaId": "57CC215D-A8DA-4D7F-8FF6-A1FC8451DEDD", "versionEndExcluding": "1.22.14", "versionStartIncluding": "1.22.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*", "matchCriteriaId": "1E67C91E-260F-4C6B-BEE1-44B9C7F29C35", "versionEndExcluding": "1.23.11", "versionStartIncluding": "1.23.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*", "matchCriteriaId": "9D2847AF-B9A8-40FF-AED5-0BBAEF012BA9", "versionEndExcluding": "1.24.5", "versionStartIncluding": "1.24.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:kubernetes:apiserver:1.25.0:*:*:*:*:*:*:*", "matchCriteriaId": "A049EC76-7250-484F-99AE-BBF05EA04225", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A security issue was discovered in kube-apiserver that allows an \naggregated API server to redirect client traffic to any URL. This could\n lead to the client performing unexpected actions as well as forwarding \nthe client's API server credentials to third parties.\n"}, {"lang": "es", "value": "Se descubri\u00f3 un problema de seguridad en kube-apiserver que permite que un servidor API agregado redirija el tr\u00e1fico del cliente a cualquier URL. Esto podr\u00eda llevar a que el cliente realice acciones inesperadas, as\u00ed como a que reenv\u00ede las credenciales del servidor API del cliente a terceros."}], "id": "CVE-2022-3172", "lastModified": "2024-11-21T07:18:58.417", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 3.7, "source": "jordan@liggitt.net", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-11-03T20:15:08.550", "references": [{"source": "jordan@liggitt.net", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://github.com/kubernetes/kubernetes/issues/112513"}, {"source": "jordan@liggitt.net", "tags": ["Mailing List"], "url": "https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRak"}, {"source": "jordan@liggitt.net", "url": "https://security.netapp.com/advisory/ntap-20231221-0005/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://github.com/kubernetes/kubernetes/issues/112513"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRak"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20231221-0005/"}], "sourceIdentifier": "jordan@liggitt.net", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "jordan@liggitt.net", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-918"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2023:1655", "cpe": "cpe:/a:redhat:openshift:4.10::el7", "package": "openshift-0:4.10.0-202303221742.p0.g16bcd69.assembly.stream.el7", "product_name": "Red Hat OpenShift Container Platform 4.10", "release_date": "2023-04-12T00:00:00Z"}, {"advisory": "RHBA-2022:7200", "cpe": "cpe:/a:redhat:openshift:4.11::el8", "package": "openshift-0:4.11.0-202210122157.p0.g5157800.assembly.stream.el8", "product_name": "Red Hat OpenShift Container Platform 4.11", "release_date": "2022-11-02T00:00:00Z"}, {"advisory": "RHSA-2022:7398", "cpe": "cpe:/a:redhat:openshift:4.12::el8", "package": "openshift-0:4.12.0-202301042257.p0.g77bec7a.assembly.stream.el8", "product_name": "Red Hat OpenShift Container Platform 4.12", "release_date": "2023-01-17T00:00:00Z"}, {"advisory": "RHSA-2023:3609", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.12::el8", "package": "odf4/ocs-rhel8-operator:v4.12.4-2", "product_name": "RHODF-4.12-RHEL-8", "release_date": "2023-06-14T00:00:00Z"}, {"advisory": "RHSA-2023:3609", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.12::el8", "package": "odf4/odf-rhel8-operator:v4.12.4-2", "product_name": "RHODF-4.12-RHEL-8", "release_date": "2023-06-14T00:00:00Z"}], "bugzilla": {"description": "kube-apiserver: Aggregated API server can cause clients to be redirected (SSRF)", "id": "2127804", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2127804"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L", "status": "verified"}, "cwe": "CWE-918", "details": ["A security issue was discovered in kube-apiserver that allows an \naggregated API server to redirect client traffic to any URL. This could\nlead to the client performing unexpected actions as well as forwarding \nthe client's API server credentials to third parties.", "A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This issue leads to the client performing unexpected actions and forwarding the client's API server credentials to third parties."], "name": "CVE-2022-3172", "package_state": [{"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Out of support scope", "package_name": "atomic-openshift", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift4/ose-openshift-apiserver-rhel8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "openshift4/ose-tests", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift_container_storage:4", "fix_state": "Out of support scope", "package_name": "ocs4/ocs-rhel8-operator", "product_name": "Red Hat Openshift Container Storage 4"}], "public_date": "2022-09-16T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-3172\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-3172\nhttps://github.com/kubernetes/kubernetes/issues/112513"], "threat_severity": "Moderate", "upstream_fix": "kube-apiserver 1.25.1, kube-apiserver 1.24.5, kube-apiserver 1.23.11, kube-apiserver 1.22.14"}