CVE-2022-1677

mediumPriorität · verfolgen · 25EPSS 0.006 · 48. PerzentilEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.60% (48th) EPSS
CVSS 6.3 · medium
Is it mine?
1,899 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · nvd · redhat_csaf

EPSS · bewertet 2026-10-27

In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster router's HAProxy configuration files. This malformed entry can match any arbitrary hostname, or all hostnames in the cluster, and direct traffic to an arbitrary application within the cluster, including one under attacker control.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenopenshift4/ose-haproxy-router@sha256:60457267591f2244695725ff013af87ecc3c4f6f8e7736d822ffa31a661ea37b_ppc64le as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf

    For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHBA-2022:1690
  • Behobenopenshift4/ose-haproxy-router@sha256:7a59f4c7b3c16e2eda3bc4ce204722a43cbecc4ad601906a731df2cdb4cffe4f_arm64 as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf

    For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHBA-2022:1690
  • Behobenopenshift4/ose-haproxy-router@sha256:a18d11de075fc9b11409f4bc4864bc73023d1510b0bb62b78f156d9a8819386e_amd64 as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf

    For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHBA-2022:1690
  • Behobenopenshift4/ose-haproxy-router@sha256:e41132cd11d4a3593bdd70c4ca137182ed3f23c19437c063ef995a8fba5bff0b_s390x as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf

    For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHBA-2022:1690
  • Behobenopenshift4/ose-haproxy-router@sha256:5ada99add8ab2e045569a0b6afa666d248627d24f3d63c44745d0f6bee8fb6bc_s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf

    "For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html"

    https://access.redhat.com/errata/RHSA-2022:2264
  • Behobenopenshift4/ose-haproxy-router@sha256:5db50f04bac98a98d1ecf0e1debc5a9ea59164103c9f03500cc400c7d270730a_ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf

    "For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html"

    https://access.redhat.com/errata/RHSA-2022:2264
  • Behobenopenshift4/ose-haproxy-router@sha256:ee1bc8f7b84dc30bb1efaa3a749feb6f8155038e383b2ded4389396fc748ae7b_amd64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf

    "For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html"

    https://access.redhat.com/errata/RHSA-2022:2264
  • Behobenopenshift4/ose-haproxy-router@sha256:70212fbd7abd80f4fd853d8c02bc02b0e494a3b470a3e5f5c5356f1cafa08fe8_ppc64le as a component of Red Hat OpenShift Container Platform 4.7redhat_csaf

    For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2268
  • Behobenopenshift4/ose-haproxy-router@sha256:7820627e1446e61ce86ef0c5c7793574b7e2090465716c7d2476cb23239064d8_s390x as a component of Red Hat OpenShift Container Platform 4.7redhat_csaf

    For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2268
  • Behobenopenshift4/ose-haproxy-router@sha256:a65c87965480ad42bd742a2994c1279c7e8b538cc61417ca261ac95bdff6e34b_amd64 as a component of Red Hat OpenShift Container Platform 4.7redhat_csaf

    For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2268
  • Behobenopenshift4/ose-haproxy-router@sha256:754c170f1b35a89174c64a0883234d71a4b8efda04cc5492962489a4717cb8cc_ppc64le as a component of Red Hat OpenShift Container Platform 4.8redhat_csaf

    For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2272
  • Behobenopenshift4/ose-haproxy-router@sha256:9df4ab9ffa2e5aa86226ad0333055d5d0f7cde3607ace51dccaa81ef5fa174f9_amd64 as a component of Red Hat OpenShift Container Platform 4.8redhat_csaf

    For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2272
  • Behobenopenshift4/ose-haproxy-router@sha256:d14bd9accf2bf6753ebd859527fcafc657bbe07e9a62f1597aa9940f86833a59_s390x as a component of Red Hat OpenShift Container Platform 4.8redhat_csaf

    For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2272
  • Behobenopenshift3/ose-haproxy-router@sha256:07c9022937d278bf0ae5325b58602d10814a5b63a61a42ba477173822b6b625c_amd64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf

    For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/3.11/upgrading/index.html

    https://access.redhat.com/errata/RHSA-2022:2281
  • Behobenopenshift4/ose-haproxy-router@sha256:0287db59f34d02887b0316d121149ece9f37e589a09522e22bd50b19b70adfa2_ppc64le as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf

    For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2283
  • Behobenopenshift4/ose-haproxy-router@sha256:3502af1fb71bb01da78130d040a1e1133a2ffc89c6e7c3dea57704a9b63e0b1c_s390x as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf

    For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2283
  • Behobenopenshift4/ose-haproxy-router@sha256:607d7f6a9dfb229c9ea747a721fa1f4a7f78d6161e328b1d8c736c56b4d5e42f_amd64 as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf

    For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2283
  • Behobenopenshift4/ose-haproxy-router@sha256:9bfe5fb0ba3d2cbc470243f893be7e35dd8bce2901cafdece5fdd967aff1c753_arm64 as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf

    For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:2283
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.4
v3.15.8mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:Usecondary · CVSS-BT (t0sche)
v3.16.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · Red Hat Product Security US
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-280USCWE-400US
04

betroffene Produkte (1,899)

Betroffene Produkte und Versionsbereiche.

20 von 1,899 angezeigt
05

Advisories (6)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHBA-2022:1690Red Hat Bug Fix Advisory: OpenShift Container Platform 4.10.13 bug fix update2022-05-11csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.10.13 is now available with updates to packages and images that fix several bugs.

  • RHSA-2022:2264Red Hat Security Advisory: OpenShift Container Platform 4.6.58 bug fix and security update2022-05-26csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.6.58 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2022:2268Red Hat Security Advisory: OpenShift Container Platform 4.7.51 security update2022-05-25csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.7.51 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2022:2272Red Hat Security Advisory: OpenShift Container Platform 4.8.41 bug fix and security update2022-05-25csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.8.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2022:2281Red Hat Security Advisory: OpenShift Container Platform 3.11.705 security update2022-05-31csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 3.11.705 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2022:2283Red Hat Security Advisory: OpenShift Container Platform 4.9.35 bug fix and security update2022-05-25csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.9.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdnvdredhat_csafNVDCVE.orgMITRE
veröffentlicht 2022-09-01geändert 2026-06-17
08

Referenzen (21)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan