CVE-2022-1902: High severity red hat advanced cluster security for kubernetes vulnerability
A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users to retrieve Notifiers from the GraphQL API, revealing secrets that can escalate their privileges.
Other sources
In Red Hat Advanced Cluster Security for Kubernetes, it was found that Notifier secrets were not properly sanitized in the GraphQL API. Authenticated ACS users could exploit this by retrieving Notifiers from the GraphQL API, revealing secrets that could then be used to escalate their privileges.
https://github.com/stackrox/stackrox/pull/1803
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-1902?
CVE-2022-1902 has a medium severity rating due to its potential for privilege escalation via untrusted data handling.
How do I fix CVE-2022-1902?
To fix CVE-2022-1902, upgrade Red Hat Advanced Cluster Security for Kubernetes to version 3.71 or later.
What versions are affected by CVE-2022-1902?
CVE-2022-1902 affects Red Hat Advanced Cluster Security for Kubernetes versions 3.68, 3.69, and 3.70.
Who can exploit CVE-2022-1902?
Authenticated users of Red Hat Advanced Cluster Security for Kubernetes can exploit CVE-2022-1902 to retrieve sensitive notifier secrets.
What are the implications of CVE-2022-1902?
The implications of CVE-2022-1902 include the potential for privilege escalation, exposing sensitive information to authenticated users.