CVE-2022-1677

mediumpriority · track · 25EPSS 0.006 · 48 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.60% (48th) EPSS

CVSS 6.3 · medium

Is it mine?

1,899 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · redhat_csaf

EPSS · scored 2026-10-27

In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster router's HAProxy configuration files. This malformed entry can match any arbitrary hostname, or all hostnames in the cluster, and direct traffic to an arbitrary application within the cluster, including one under attacker control.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedopenshift4/ose-haproxy-router@sha256:60457267591f2244695725ff013af87ecc3c4f6f8e7736d822ffa31a661ea37b_ppc64le as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf
For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHBA-2022:1690
Fixedopenshift4/ose-haproxy-router@sha256:7a59f4c7b3c16e2eda3bc4ce204722a43cbecc4ad601906a731df2cdb4cffe4f_arm64 as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf
For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHBA-2022:1690
Fixedopenshift4/ose-haproxy-router@sha256:a18d11de075fc9b11409f4bc4864bc73023d1510b0bb62b78f156d9a8819386e_amd64 as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf
For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHBA-2022:1690
Fixedopenshift4/ose-haproxy-router@sha256:e41132cd11d4a3593bdd70c4ca137182ed3f23c19437c063ef995a8fba5bff0b_s390x as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf
For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHBA-2022:1690
Fixedopenshift4/ose-haproxy-router@sha256:5ada99add8ab2e045569a0b6afa666d248627d24f3d63c44745d0f6bee8fb6bc_s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
"For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html"
https://access.redhat.com/errata/RHSA-2022:2264
Fixedopenshift4/ose-haproxy-router@sha256:5db50f04bac98a98d1ecf0e1debc5a9ea59164103c9f03500cc400c7d270730a_ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
"For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html"
https://access.redhat.com/errata/RHSA-2022:2264
Fixedopenshift4/ose-haproxy-router@sha256:ee1bc8f7b84dc30bb1efaa3a749feb6f8155038e383b2ded4389396fc748ae7b_amd64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
"For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html"
https://access.redhat.com/errata/RHSA-2022:2264
Fixedopenshift4/ose-haproxy-router@sha256:70212fbd7abd80f4fd853d8c02bc02b0e494a3b470a3e5f5c5356f1cafa08fe8_ppc64le as a component of Red Hat OpenShift Container Platform 4.7redhat_csaf
For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2268
Fixedopenshift4/ose-haproxy-router@sha256:7820627e1446e61ce86ef0c5c7793574b7e2090465716c7d2476cb23239064d8_s390x as a component of Red Hat OpenShift Container Platform 4.7redhat_csaf
For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2268
Fixedopenshift4/ose-haproxy-router@sha256:a65c87965480ad42bd742a2994c1279c7e8b538cc61417ca261ac95bdff6e34b_amd64 as a component of Red Hat OpenShift Container Platform 4.7redhat_csaf
For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2268
Fixedopenshift4/ose-haproxy-router@sha256:754c170f1b35a89174c64a0883234d71a4b8efda04cc5492962489a4717cb8cc_ppc64le as a component of Red Hat OpenShift Container Platform 4.8redhat_csaf
For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2272
Fixedopenshift4/ose-haproxy-router@sha256:9df4ab9ffa2e5aa86226ad0333055d5d0f7cde3607ace51dccaa81ef5fa174f9_amd64 as a component of Red Hat OpenShift Container Platform 4.8redhat_csaf
For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2272
Fixedopenshift4/ose-haproxy-router@sha256:d14bd9accf2bf6753ebd859527fcafc657bbe07e9a62f1597aa9940f86833a59_s390x as a component of Red Hat OpenShift Container Platform 4.8redhat_csaf
For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2272
Fixedopenshift3/ose-haproxy-router@sha256:07c9022937d278bf0ae5325b58602d10814a5b63a61a42ba477173822b6b625c_amd64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/3.11/upgrading/index.html
https://access.redhat.com/errata/RHSA-2022:2281
Fixedopenshift4/ose-haproxy-router@sha256:0287db59f34d02887b0316d121149ece9f37e589a09522e22bd50b19b70adfa2_ppc64le as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf
For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2283
Fixedopenshift4/ose-haproxy-router@sha256:3502af1fb71bb01da78130d040a1e1133a2ffc89c6e7c3dea57704a9b63e0b1c_s390x as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf
For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2283
Fixedopenshift4/ose-haproxy-router@sha256:607d7f6a9dfb229c9ea747a721fa1f4a7f78d6161e328b1d8c736c56b4d5e42f_amd64 as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf
For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2283
Fixedopenshift4/ose-haproxy-router@sha256:9bfe5fb0ba3d2cbc470243f893be7e35dd8bce2901cafdece5fdd967aff1c753_arm64 as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf
For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html
https://access.redhat.com/errata/RHSA-2022:2283

cvss

Technical severity, 0–10. One row per scoring source.

6.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lprimary · NVD / NIST USexploitability 2.8 · impact 3.4

v3.15.8mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:Usecondary · CVSS-BT (t0sche)

v3.16.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-280USCWE-400US

affected products (1,899)

Products and version ranges known to be affected.

n/a OpenShift≤ Openshift 3.11 and 4.6 onwardsenisa_euvdEU
redhat openshift container platform= 3.11nvdUScpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
redhat openshift container platform= 4.10nvdUScpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
redhat openshift container platform= 4.6nvdUScpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
redhat openshift container platform= 4.7nvdUScpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
redhat openshift container platform= 4.8nvdUScpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
redhat openshift container platform= 4.9nvdUScpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
openshift3/apb-base@sha256:6cb620e72ab990bbd1bc269ab92449069fb10472e9241939e485daf3c4b6cf0d_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/apb-tools@sha256:9cdf863460cee8c02b1e0c3b1b838df99e71b970f96c73232a0c3800232e41f2_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/automation-broker-apb@sha256:d4a4b6fe24be32d755f6d48dc5662d606cf147c5e7cd3f11905eab679582264f_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/csi-attacher@sha256:255a5412e8d1ea5ad11ac9ff368524b6e8a06de845dc1085e19e4588d9a25428_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/csi-driver-registrar@sha256:6182f1bdc7ac24a90547919c5502defb55925d577ebd397df21d2ede8e2bd26e_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/csi-livenessprobe@sha256:03b2331e42a8f26c944e171b51b63e36af007e8fe142e2a78a12d694a3e3a71a_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/csi-provisioner@sha256:6491452d48148ab9e5c3ad95352a07027c908983e3d2078f94f96101202f49d2_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/grafana@sha256:ef29598b97ac55615cfd19b3378ba50c84c0865f50832cf4516255097cf1163d_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/image-inspector@sha256:27067309b704b7de57aa90634cd72441c8918a8d505dd86613a0e27ae64367f5_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/jenkins-agent-maven-36-rhel7@sha256:657ce5c00542f04f77d9ae6bb0e719c041913807711c6931e76777d5e8c5aa78_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/jenkins-slave-base-rhel7@sha256:6adef25c5daac16630380dd9af702a632eb3b4d87e624dfd314bebf6fb8a7fde_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/kuryr-cni@sha256:a8184e027b4be16503ff12cfcba919a412ee77ceb11a3fc02328f43fc8b2056b_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS
openshift3/kuryr-controller@sha256:5ab949ebea793878d84043841c063af174b44ad16376e5b4ec1b75d6fdfd23f3_amd64 as a component of Red Hat OpenShift Container Platform 3.11all versionsnot affectedredhat_csafUS

showing 20 of 1,899

advisories (6)

Vendor and ecosystem advisories describing this.

RHBA-2022:1690Red Hat Bug Fix Advisory: OpenShift Container Platform 4.10.13 bug fix update2022-05-11csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.10.13 is now available with updates to packages and images that fix several bugs.
RHSA-2022:2264Red Hat Security Advisory: OpenShift Container Platform 4.6.58 bug fix and security update2022-05-26csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.6.58 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2022:2268Red Hat Security Advisory: OpenShift Container Platform 4.7.51 security update2022-05-25csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.7.51 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2022:2272Red Hat Security Advisory: OpenShift Container Platform 4.8.41 bug fix and security update2022-05-25csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.8.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2022:2281Red Hat Security Advisory: OpenShift Container Platform 3.11.705 security update2022-05-31csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 3.11.705 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2022:2283Red Hat Security Advisory: OpenShift Container Platform 4.9.35 bug fix and security update2022-05-25csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.9.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd redhat_csaf NVD CVE.org MITRE

published 2022-09-01modified 2026-06-17

references (21)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan