CVE-2022-28224 Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature

2022-06-0100:00:00

CWE-201

CWE-200

Tigera

www.cve.org

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.9%

JSON

Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Due to insufficient validation, a privileged attacker may be able to set a floating IP annotation to a pod even if the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod.

CNA Affected

[
  {
    "product": "Calico Enterprise",
    "vendor": "Tigera",
    "versions": [
      {
        "lessThanOrEqual": "v3.12.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Calico",
    "vendor": "Project Calico",
    "versions": [
      {
        "lessThanOrEqual": "v3.22.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]