Skip to content
OpenAdvisories
Medium RHBA-2022:7200 1 CVE

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11.12 packages update

Published Sep 16, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.11::el8 openshift 0:4.11.0-202210122157.p0.g5157800.assembly.stream.el8
Red Hat · OpenShift 4 openshift:4.11::el8 openshift-hyperkube 0:4.11.0-202210122157.p0.g5157800.assembly.stream.el8

Vulnerabilities 1

  • Medium 5.1
    CVE-2022-3172 Public exploit

    Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

    A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third partie…

    Kubernetes kube-apiserver kubernetes Debian

References

  • article
    https://issues.redhat.com/browse/OCPBUGS-2857
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_7200.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-3172
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2127804
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3172
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3172
  • article
    https://github.com/kubernetes/kubernetes/issues/112513