High severity8.8NVD Advisory· Published Sep 1, 2022· Updated Jun 17, 2026
CVE-2022-1902
CVE-2022-1902
Description
A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users to retrieve Notifiers from the GraphQL API, revealing secrets that can escalate their privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- Red Hat Advanced Cluster Security for Kubernetes/Red Hat Advanced Cluster Security for Kubernetesdescription
cpe:2.3:a:redhat:advanced_cluster_security:3.68:*:*:*:*:kubernates:*:*+ 2 more
- cpe:2.3:a:redhat:advanced_cluster_security:3.68:*:*:*:*:kubernates:*:*
- cpe:2.3:a:redhat:advanced_cluster_security:3.69:*:*:*:*:kubernates:*:*
- cpe:2.3:a:redhat:advanced_cluster_security:3.70:*:*:*:*:kubernates:*:*
Patches
Vulnerability mechanics
References
3- github.com/stackrox/stackrox/pull/1803nvdExploitPatchThird Party Advisory
- access.redhat.com/security/cve/CVE-2022-1902nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.