1. Home
  2. CVE Database
  3. CVE-2022-0567
CRITICAL · 9.1

CVE-2022-0567

A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster...

Vulnerability Description

A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
OvnOvn-Kubernetes< 4.7.47

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2022-0567?

CVE-2022-0567 is a vulnerability with a CVSS score of 9.1 (CRITICAL). A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster...

How severe is CVE-2022-0567?

CVE-2022-0567 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-0567?

Check the references section above for vendor advisories and patch information. Affected products include: Ovn Ovn-Kubernetes.