Medium severity5.1NVD Advisory· Published Nov 3, 2023· Updated Jun 17, 2026

CVE-2022-3172

Description

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cri O/Apiserver2 versions
cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*range: <=1.21.14
- cpe:2.3:a:kubernetes:apiserver:1.25.0:*:*:*:*:*:*:*
Cri O/kube-apiserverllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: v1.25.0

Patches

Vulnerability mechanics

References

github.com/kubernetes/kubernetes/issues/112513nvdIssue TrackingVendor Advisory
groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRaknvdMailing List
security.netapp.com/advisory/ntap-20231221-0005/nvd

News mentions

No linked articles in our index yet.

cvss	0.332
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000