Lucene search

K
cvelistRedhatCVELIST:CVE-2022-0567
HistoryApr 20, 2022 - 3:30 p.m.

CVE-2022-0567

2022-04-2015:30:35
CWE-20
redhat
www.cve.org
flaw
ovn-kubernetes
bypassing
ingress policies
information disclosure

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

28.4%

A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.

CNA Affected

[
  {
    "product": "ovn-kubernetes",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OCP v 4.10.8"
      }
    ]
  }
]

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

28.4%

Related for CVELIST:CVE-2022-0567