cbcvebase.
CVE-2022-1632
published 2022-09-01

CVE-2022-1632: An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA…

medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.

Affected

5 ranges
VendorProductVersion rangeFixed in
fedoraprojectfedora——
fedoraprojectfedora——
redhatansible_automation_platform——
redhatopenshift_container_platform——
redhatopenshift_container_platform——