Skip to content
OpenAdvisories
Medium RHBA-2023:0452 1 CVE

Red Hat Bug Fix Advisory: rpm

Published Sep 16, 2024 · Updated Aug 14, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.12::el8 microshift 0:4.12.1-202301261525.p0.g3db9e81.assembly.4.12.1.el8

Vulnerabilities 1

  • Medium 6.6
    CVE-2022-3294 Public exploit

    Node address isn't always verified when proxying

    Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserv…

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go

References

  • article
    https://issues.redhat.com/browse/OCPBUGS-4983
  • article
    https://issues.redhat.com/browse/OCPBUGS-5549
  • article
    https://issues.redhat.com/browse/OCPBUGS-5859
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_0452.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-3294
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2136675
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3294
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3294
  • article
    https://github.com/kubernetes/kubernetes/issues/113757