CVE-2022-3162

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3162
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3162.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3162
Aliases
Downstream
Related
Published
2023-03-01T00:00:00Z
Modified
2026-07-08T06:01:14.561142476Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Unauthorized read of Custom Resources
Details

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions sharing the same API group 2. Users have cluster-wide list or watch authorization on one of those custom resources. 3. The same users are not authorized to read another custom resource in the same API group.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3162.json",
    "cna_assigner": "kubernetes",
    "cwe_ids": [
        "CWE-23"
    ]
}
References

Affected packages

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
254eabfe0e9fbe17c214094a694d660df0817cc0
Introduced
b1292eb3207057f0274a51330ba8d612f4faadd6
Last affected
69dfb18d15a9911ea7c84710175b79efa945025e
Introduced
dfb3e7ad852bb4bddb790a705c185cef198c2823
Last affected
df95cb551f35b0486833b1c5a232052ca75c877f
Introduced
d37f045d808033445aaa284ad80454c948b37958
Last affected
34208c3e83ddc4ce4ed4d9142e09447eb167086a
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.22.15"
        },
        {
            "introduced": "1.23.0"
        },
        {
            "last_affected": "1.23.13"
        },
        {
            "introduced": "1.24.0"
        },
        {
            "last_affected": "1.24.7"
        },
        {
            "introduced": "1.25.0"
        },
        {
            "last_affected": "1.25.3"
        }
    ]
}
Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1d79bc3bcccfba7466c44cc2055d6e7442e140ea
Introduced
ab69524f795c42094a6630298ff53f3c3ebab7f4
Last affected
592eca05be27f7d927d0b25cbb4241d75a9574bf
Introduced
4ce5a8954017644c5420bae81d72b09b735c21f0
Last affected
e6f35974b08862a23e7f4aad8e5d7f7f2de26c15
Introduced
a866cbe2e5bbaa01cfd5e969aa3e033f3282a8a2
Last affected
434bfd82814af038ad94d62ebe59b133fcb50506
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.22.15"
        },
        {
            "introduced": "1.23.0"
        },
        {
            "last_affected": "1.23.13"
        },
        {
            "introduced": "1.24.0"
        },
        {
            "last_affected": "1.24.7"
        },
        {
            "introduced": "1.25.0"
        },
        {
            "last_affected": "1.25.3"
        }
    ]
}

Affected versions

kubernetes-1.*
kubernetes-1.10.0-alpha.0
kubernetes-1.10.0-alpha.1
kubernetes-1.10.0-alpha.2
kubernetes-1.10.0-alpha.3
kubernetes-1.11.0-alpha.0
kubernetes-1.11.0-alpha.1
kubernetes-1.11.0-alpha.2
kubernetes-1.12.0-alpha.0
kubernetes-1.12.0-alpha.1
kubernetes-1.12.0-beta.0
kubernetes-1.13.0-alpha.0
kubernetes-1.22.15
kubernetes-1.23.13
kubernetes-1.24.7
kubernetes-1.25.3
kubernetes-1.9.0-alpha.0
kubernetes-1.9.0-alpha.1
kubernetes-1.9.0-alpha.2
kubernetes-1.9.0-alpha.3
v0.*
v0.13.1-dev
v0.17.0
v0.22.15
v0.23.13
v0.24.7
v0.25.3
v1.*
v1.1.0-alpha.0
v1.1.0-alpha.1
v1.10.0-alpha.0
v1.10.0-alpha.1
v1.10.0-alpha.2
v1.10.0-alpha.3
v1.11.0-alpha.0
v1.11.0-alpha.1
v1.11.0-alpha.2
v1.12.0-alpha.0
v1.12.0-alpha.1
v1.13.0-alpha.0
v1.13.0-alpha.1
v1.13.0-alpha.2
v1.13.0-alpha.3
v1.14.0-alpha.0
v1.14.0-alpha.1
v1.14.0-alpha.2
v1.14.0-alpha.3
v1.15.0-alpha.0
v1.15.0-alpha.1
v1.15.0-alpha.2
v1.15.0-alpha.3
v1.16.0-alpha.0
v1.16.0-alpha.1
v1.16.0-alpha.2
v1.16.0-alpha.3
v1.17.0-alpha.0
v1.17.0-alpha.1
v1.17.0-alpha.2
v1.17.0-alpha.3
v1.18.0-alpha.0
v1.18.0-alpha.1
v1.18.0-alpha.2
v1.18.0-alpha.4
v1.18.0-alpha.5
v1.19.0-alpha.0
v1.19.0-alpha.1
v1.19.0-alpha.2
v1.19.0-alpha.3
v1.19.0-beta.0
v1.19.0-beta.1
v1.19.0-beta.2
v1.2.0-alpha.1
v1.2.0-alpha.2
v1.2.0-alpha.3
v1.2.0-alpha.4
v1.2.0-alpha.5
v1.2.0-alpha.6
v1.2.0-alpha.7
v1.2.0-alpha.8
v1.20.0-alpha.0
v1.20.0-alpha.1
v1.20.0-alpha.2
v1.20.0-alpha.3
v1.20.0-beta.0
v1.20.0-beta.1
v1.20.0-beta.2
v1.21.0-alpha.0
v1.21.0-alpha.1
v1.21.0-alpha.2
v1.21.0-alpha.3
v1.21.0-beta.0
v1.21.0-beta.1
v1.22.0
v1.22.0-alpha.0
v1.22.0-alpha.1
v1.22.0-alpha.2
v1.22.0-alpha.3
v1.22.0-beta.0
v1.22.0-beta.1
v1.22.0-beta.2
v1.22.0-rc.0
v1.22.1
v1.22.1-rc.0
v1.22.10
v1.22.10-rc.0
v1.22.11
v1.22.11-rc.0
v1.22.12
v1.22.12-rc.0
v1.22.13
v1.22.13-rc.0
v1.22.14
v1.22.14-rc.0
v1.22.15
v1.22.15-rc.0
v1.22.2
v1.22.2-rc.0
v1.22.3
v1.22.3-rc.0
v1.22.4
v1.22.4-rc.0
v1.22.5
v1.22.5-rc.0
v1.22.6
v1.22.6-rc.0
v1.22.7
v1.22.7-rc.0
v1.22.8
v1.22.8-rc.0
v1.22.9
v1.22.9-rc.0
v1.23.0
v1.23.0-alpha.0
v1.23.1
v1.23.1-rc.0
v1.23.10
v1.23.10-rc.0
v1.23.11
v1.23.11-rc.0
v1.23.12
v1.23.12-rc.0
v1.23.13
v1.23.13-rc.0
v1.23.2
v1.23.2-rc.0
v1.23.3
v1.23.3-rc.0
v1.23.4
v1.23.4-rc.0
v1.23.5
v1.23.5-rc.0
v1.23.6
v1.23.6-rc.0
v1.23.7
v1.23.7-rc.0
v1.23.8
v1.23.8-rc.0
v1.23.9
v1.23.9-rc.0
v1.24.0
v1.24.1
v1.24.1-rc.0
v1.24.2
v1.24.2-rc.0
v1.24.3
v1.24.3-rc.0
v1.24.4
v1.24.4-rc.0
v1.24.5
v1.24.5-rc.0
v1.24.6
v1.24.6-rc.0
v1.24.7
v1.24.7-rc.0
v1.25.0
v1.25.1
v1.25.1-rc.0
v1.25.2
v1.25.2-rc.0
v1.25.3
v1.25.3-rc.0
v1.3.0-alpha.0
v1.3.0-alpha.1
v1.3.0-alpha.2
v1.3.0-alpha.3
v1.3.0-alpha.4
v1.3.0-alpha.5
v1.4.0-alpha.1
v1.4.0-alpha.2
v1.4.0-alpha.3
v1.5.0-alpha.0
v1.5.0-alpha.1
v1.5.0-alpha.2
v1.6.0-alpha.0
v1.6.0-alpha.1
v1.6.0-alpha.2
v1.6.0-alpha.3
v1.7.0-alpha.0
v1.7.0-alpha.1
v1.7.0-alpha.2
v1.7.0-alpha.3
v1.7.0-alpha.4
v1.8.0-alpha.0
v1.8.0-alpha.1
v1.8.0-alpha.2
v1.8.0-alpha.3
v1.9.0-alpha.0
v1.9.0-alpha.1
v1.9.0-alpha.2
v1.9.0-alpha.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3162.json"