AZL-13782 CVE-2022-3162 affecting package kube-vip-cloud-provider for versions less than 0.0.2-21

🗓️ 01 Mar 2023 19:15:25Reported by GoogleType

osv🔗 osv.dev👁 1 Views

CVE-2022-3162 in kube-vip-cloud-provider before 0.0.2-21 allows cross-resource read in the same API group when listing or watching one type.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Kubernetes (CVE-2022-3162, CVE-2022-3294)	17 May 202318:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion HCI may be vulnerable to Unauthorized requests (SSRF), Improper path traversal, via k8s.io/apimachinery, k8s.io/apiserver (CVE-2022-3172, CVE-2022-3162)	21 Dec 202317:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion may be vulnerable to Unauthorized requests (SSRF), Improper path traversal, via k8s.io/apimachinery, k8s.io/apiserver (CVE-2022-3172, CVE-2022-3162)	16 Nov 202321:29	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package kubernetes version 1.26.3-alt1	29 Mar 202300:00	–	altlinux
Tenable Nessus	Azure Linux 3.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)	22 Feb 202500:00	–	nessus
Tenable Nessus	Fedora 35 : kubernetes (2022-2004702d98)	22 Dec 202200:00	–	nessus
Tenable Nessus	Fedora 37 : kubernetes (2022-8647729ff8)	14 Nov 202400:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)	3 Jul 202400:00	–	nessus
Tenable Nessus	Oracle Linux 7 : kubernetes (ELSA-2022-10033)	29 Nov 202200:00	–	nessus
Tenable Nessus	Oracle Linux 8 : kubernetes (ELSA-2022-10034)	29 Nov 202200:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-3162

21 Apr 2026 04:23Current

7High risk

Vulners AI Score7

CVSS 3.16.5

EPSS0.01025