Critical severity · published Apr 20, 2022
CVE-2022-0567
A flaw was found in ovn-kubernetes
9.1
CVSS
1%
EPSS
No
On KEV
Description
A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OV
Ovn-kubernetes · Ovn
before 4.7.47; 4.8.0 before 4.8.36; 4.9.0 before 4.9.27; 4.10.0 before 4.10.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-0567
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-0567
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2053326
More from Ovn-kubernetes
5.6
CVE-2021-3499
A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules