PT-2022-2058 · Unknown+2 · Kubeclient+2

Cben · Published 2022-02-24 · Updated 2022-04-07 · CVE-2022-0759

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions kubeclient versions prior to 4.9.3

Description The issue is related to errors in the certificate authentication procedure of the Kubeclient::Config class in the Kubernetes REST API client. This can allow a remote attacker to perform a Man-in-the-middle (MITM) attack. The problem arises when the kubeconfig file does not configure a custom CA to verify certificates, causing kubeclient to accept any certificate.

Recommendations For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider configuring a custom CA to verify certificates in the kubeconfig file to minimize the risk of exploitation. Restrict access to sensitive resources until the update is applied.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2022-01721

CVE-2022-0759

GHSA-69P3-XP37-F692

RHSA-2023:6818

RLSA-2023:6818

Affected Products

Debian

Rocky Linux

Kubeclient

References · 19

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kubeclient/CVE-2022-0759.yml · Exploit
• https://github.com/ManageIQ/kubeclient/issues/555 · Patch
• https://github.com/ManageIQ/kubeclient/issues/554 · Patch
• https://bdu.fstec.ru/vul/2022-01721 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-0759 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0759 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0759 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-69p3-xp37-f692 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-0759 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0759 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0759 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:6818 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0759 · Vendor Advisory
• https://github.com/ManageIQ/kubeclient/pull/556 · Note
• https://github.com/ManageIQ/kubeclient/commit/109ea71de5a8881748f03ebbe103b49f0f1c7887 · Note