Privilege escalation using hop-by-hop Connection header
CVE-2022-23652

8.8HIGH

Key Information:

Vendor

Clastix

Status
Capsule-proxy
Vendor
CVE Published:
22 February 2022

What is CVE-2022-23652?

capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes. In versions prior to 0.2.1 an attacker with a proper authentication mechanism may use a malicious Connection header to start a privilege escalation attack towards the Kubernetes API Server. This vulnerability allows for an exploit of the cluster-admin Role bound to capsule-proxy. There are no known workarounds for this issue.

Affected Version(s)

capsule-proxy < 0.2.1

References

https://github.com/clastix/capsule-proxy/security/advisor...
x_refsource_CONFIRM
https://github.com/clastix/capsule-proxy/issues/188
x_refsource_MISC
https://github.com/clastix/capsule-proxy/commit/efe91f68e...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.