CVE-2022-1632

No fix known EPSS <1%

An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.

Published 2022-09-01 · CVE record · OSV

Products: redhat ansible_automation_platform, redhat openshift_container_platform, fedoraproject fedora