critical9.1
CVE-2022-0567
A flaw was found in ovn-kubernetes.
Impact
A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ovn | Ovn-Kubernetes | before 4.7.47 from 4.8.0 before 4.8.36 from 4.9.0 before 4.9.27 from 4.10.0 before 4.10.8 |