FKIE_CVE-2022-3172

Vulnerability from fkie_nvd - Published: 2023-11-03 20:15 - Updated: 2025-02-13 17:15
Severity ?
5.1 (Medium) - CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
Summary
A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties.
References
jordan@liggitt.nethttps://github.com/kubernetes/kubernetes/issues/112513Issue Tracking, Vendor Advisory
jordan@liggitt.nethttps://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRakMailing List
jordan@liggitt.nethttps://security.netapp.com/advisory/ntap-20231221-0005/
af854a3a-2127-422b-91ae-364da2661108https://github.com/kubernetes/kubernetes/issues/112513Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRakMailing List
af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20231221-0005/
Impacted products
Vendor Product Version
kubernetes apiserver *
kubernetes apiserver *
kubernetes apiserver *
kubernetes apiserver *
kubernetes apiserver 1.25.0
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D740494E-6332-4421-BE43-C0CEB179CBA6",
              "versionEndIncluding": "1.21.14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "57CC215D-A8DA-4D7F-8FF6-A1FC8451DEDD",
              "versionEndExcluding": "1.22.14",
              "versionStartIncluding": "1.22.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E67C91E-260F-4C6B-BEE1-44B9C7F29C35",
              "versionEndExcluding": "1.23.11",
              "versionStartIncluding": "1.23.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D2847AF-B9A8-40FF-AED5-0BBAEF012BA9",
              "versionEndExcluding": "1.24.5",
              "versionStartIncluding": "1.24.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:apiserver:1.25.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A049EC76-7250-484F-99AE-BBF05EA04225",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A security issue was discovered in kube-apiserver that allows an \naggregated API server to redirect client traffic to any URL.  This could\n lead to the client performing unexpected actions as well as forwarding \nthe client\u0027s API server credentials to third parties."
    },
    {
      "lang": "es",
      "value": "Se descubri\u00f3 un problema de seguridad en kube-apiserver que permite que un servidor API agregado redirija el tr\u00e1fico del cliente a cualquier URL. Esto podr\u00eda llevar a que el cliente realice acciones inesperadas, as\u00ed como a que reenv\u00ede las credenciales del servidor API del cliente a terceros."
    }
  ],
  "id": "CVE-2022-3172",
  "lastModified": "2025-02-13T17:15:42.960",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 5.1,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 1.0,
        "impactScore": 3.7,
        "source": "jordan@liggitt.net",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 4.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-11-03T20:15:08.550",
  "references": [
    {
      "source": "jordan@liggitt.net",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://github.com/kubernetes/kubernetes/issues/112513"
    },
    {
      "source": "jordan@liggitt.net",
      "tags": [
        "Mailing List"
      ],
      "url": "https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRak"
    },
    {
      "source": "jordan@liggitt.net",
      "url": "https://security.netapp.com/advisory/ntap-20231221-0005/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://github.com/kubernetes/kubernetes/issues/112513"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRak"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.netapp.com/advisory/ntap-20231221-0005/"
    }
  ],
  "sourceIdentifier": "jordan@liggitt.net",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-918"
        }
      ],
      "source": "jordan@liggitt.net",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-918"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.