← CVE Intelligence

CVE-2022-1632

n/a / Openshift PUBLISHED

Description (CNA)

An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.

Affected (CNA)

Vendor / productVersions
n/a / Openshiftaffected 4.8.17

CWE

CWE-295

References

ADP enrichment

CVE

No English description supplied.