← Database

CVE-2022-1632

MEDIUM CVSS: 6.5 Published: 2022-09-01 Modified: 2026-06-17

Description

An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.

Affected Platforms

Redhat Ansible Automation PlatformFedoraproject FedoraRedhat Openshift Container Platform

Weakness Type

CWE-295, CWE-295

References