Uploaded image for project: 'OpenShift Service Mesh'
  1. OpenShift Service Mesh
  2. OSSM-2251

CVE-2022-3962 openshift-istio-kiali-container: kiali: content spoofing [ossm-2.3]

    XMLWordPrintable

Details

    • False
    • None
    • False

    Description

      Security Tracking Issue

      Do not make this issue public.

      Impact: Low
      Reported Date: 11-Nov-2022
      Resolve Bug By: 11-Nov-2023

      In case the dates above are already past, please evaluate this bug in your next prioritization review and make a decision then. Remember to explicitly set CLOSED:WONTFIX if you decide not to fix this bug.

      Please review this tracker and its impact on your product or service, as soon as possible. The trackers are filed WITHOUT in-depth analysis as the vulnerability has a Low or Moderate severity impact on this product or service. For more details, please refer to following confluence page - https://docs.engineering.redhat.com/x/3e_3EQ

      Please see the Security Errata Policy for further details: https://docs.engineering.redhat.com/x/9kKpDw

      Flaw:


      CVE-2022-3962 kiali: content spoofing
      https://bugzilla.redhat.com/show_bug.cgi?id=2148661

      affects based on 'depcli github.com/kiali/kiali -v'

      Attachments

        1. image-2022-11-11-10-38-46-504.png
          14 kB
          John Mazzitelli
        2. image-2022-11-11-10-39-15-135.png
          12 kB
          John Mazzitelli
        3. image-2022-11-11-10-46-11-011.png
          16 kB
          John Mazzitelli
        4. image-2022-11-11-10-46-25-720.png
          15 kB
          John Mazzitelli
        5. image-2022-11-11-10-46-45-034.png
          12 kB
          John Mazzitelli
        6. image-2022-11-11-10-50-59-240.png
          7 kB
          John Mazzitelli
        7. image-2022-11-11-13-12-49-998.png
          11 kB
          John Mazzitelli
        8. image-2022-11-11-13-13-03-705.png
          11 kB
          John Mazzitelli
        9. image-2022-11-11-13-13-29-819.png
          11 kB
          John Mazzitelli
        10. image-2022-11-11-14-38-15-811.png
          13 kB
          John Mazzitelli

        Activity

          People

            Unassigned Unassigned
            jmazzitelli John Mazzitelli
            Alberto Jesus Gutierrez Juanes, Edgar Hernández, Jay Shaughnessy, Matthew Mahoney, Nicholas Tait, Pavel Marek
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: