« Volver al listado

CVE-2022-28224

Estado: AnalizadaMedia (5.5)—

Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Due to insufficient validation, a privileged attacker may be able to set a floating IP annotation to a pod even if the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Tigera — CalicoTigera — Calico Enterprise

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-28224",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@tigera.io",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@tigera.io",
      "affectedData": [
        {
          "vendor": "Tigera",
          "product": "Calico Enterprise",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "v3.12.0"
            }
          ]
        },
        {
          "vendor": "Project Calico",
          "product": "Calico",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "v3.22.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-06-06T18:15:09.360",
  "references": [
    {
      "url": "https://www.tigera.io/security-bulletins-tta-2022-001/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@tigera.io"
    },
    {
      "url": "https://www.tigera.io/security-bulletins-tta-2022-001/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@tigera.io",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        },
        {
          "lang": "en",
          "value": "CWE-201"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Due to insufficient validation, a privileged attacker may be able to set a floating IP annotation to a pod even if the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod."
    },
    {
      "lang": "es",
      "value": "Los clústeres usando Calico (versiones 3.22.1 y anteriores), Calico Enterprise (versiones 3.12.0 y anteriores), pueden ser vulnerables al secuestro de rutas con la función de IP flotante. Debido a una comprobación insuficiente, un atacante privilegiado puede ser capaz de establecer una anotación de IP flotante a un pod incluso si la característica no está habilitada. Esto puede permitir al atacante interceptar y redirigir el tráfico a su pod comprometido"
    }
  ],
  "lastModified": "2026-06-17T04:38:11.203",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "162FAB6F-BD82-4E43-B77C-8951E2DAA134",
              "versionEndExcluding": "3.20.5"
            },
            {
              "criteria": "cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAD77006-92F6-4BEA-95F3-799B4A2D30D0",
              "versionEndExcluding": "3.21.5",
              "versionStartIncluding": "3.21.0"
            },
            {
              "criteria": "cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84190BD4-C9DF-4DFA-A74C-2F32DCF58316",
              "versionEndExcluding": "3.22.2",
              "versionStartIncluding": "3.22.0"
            },
            {
              "criteria": "cpe:2.3:a:tigera:calico_enterprise:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E4832D7-F220-4771-8B01-54327CB11938",
              "versionEndExcluding": "3.11.4"
            },
            {
              "criteria": "cpe:2.3:a:tigera:calico_enterprise:3.12.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6F8BCF7-776F-4B3B-AE3D-3004DA243527"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@tigera.io"
}