Server-Side Request Forgery (SSRF) in Kubernetes - CVE-2022-3172
Published: September 21, 2022
Vulnerability identifier: #VU67554
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2022-3172
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Affected software:
Kubernetes
Migration Toolkit for Containers
IBM Edge Application Manager
Red Hat OpenShift Container Platform
Multicluster Engine for Kubernetes
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift Service Mesh
Ansible Automation Platform
Red Hat Migration Toolkit for Applications
Netcool Operations Insight
IBM MQ Operator
IBM Fusion HCI
IBM Cloud Pak for Business Automation
IBM Robotic Process Automation
openEuler
toolbox (Red Hat package)
kubernetes-help
kubernetes
kubernetes-kubelet
kubernetes-kubeadm
kubernetes-client
kubernetes-node
kubernetes-master
cri-o (Red Hat package)
haproxy (Red Hat package)
jenkins (Red Hat package)
openshift (Red Hat package)
openshift-clients (Red Hat package)
jenkins-2-plugins (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
IBM i Modernization Engine for Lifecycle Integration
Database Operator for FoundationDB
DB2 Warehouse on Cloud Pak for Data
Red Hat OpenShift on IBM Cloud
IBM supplied MQ Advanced container images
IBM Sterling Order Management
IBM DB2
Kubernetes
Migration Toolkit for Containers
IBM Edge Application Manager
Red Hat OpenShift Container Platform
Multicluster Engine for Kubernetes
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift Service Mesh
Ansible Automation Platform
Red Hat Migration Toolkit for Applications
Netcool Operations Insight
IBM MQ Operator
IBM Fusion HCI
IBM Cloud Pak for Business Automation
IBM Robotic Process Automation
openEuler
toolbox (Red Hat package)
kubernetes-help
kubernetes
kubernetes-kubelet
kubernetes-kubeadm
kubernetes-client
kubernetes-node
kubernetes-master
cri-o (Red Hat package)
haproxy (Red Hat package)
jenkins (Red Hat package)
openshift (Red Hat package)
openshift-clients (Red Hat package)
jenkins-2-plugins (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
IBM i Modernization Engine for Lifecycle Integration
Database Operator for FoundationDB
DB2 Warehouse on Cloud Pak for Data
Red Hat OpenShift on IBM Cloud
IBM supplied MQ Advanced container images
IBM Sterling Order Management
IBM DB2
Detailed vulnerability description
The disclosed vulnerability allows a remote attacker to perform SSRF attacks.
The vulnerability exists due to insufficient validation of user-supplied input in kube-apiserver. A remote attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems.
Successful exploitation of this vulnerability may allow a remote attacker gain access to sensitive data, located in the local network or send malicious requests to other servers from the vulnerable system.
How to mitigate CVE-2022-3172
Install updates from vendor's website.