CVE-2022-23652

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-23652

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-23652.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-23652

Aliases

Published

2022-02-22T19:55:11Z

Modified

2025-12-02T20:28:09.367842Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Privilege escalation using hop-by-hop Connection header

Details

capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes. In versions prior to 0.2.1 an attacker with a proper authentication mechanism may use a malicious Connection header to start a privilege escalation attack towards the Kubernetes API Server. This vulnerability allows for an exploit of the cluster-admin Role bound to capsule-proxy. There are no known workarounds for this issue.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23652.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-287"
    ]
}

References

Affected packages

Git / github.com/clastix/capsule-proxy

Affected ranges

Type: GIT
Repo: https://github.com/clastix/capsule-proxy
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

d85232c51624817909af86825fbc70c32e27be0e

Affected versions

v0.*

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.1.0

v0.1.1

v0.2.0

Git / github.com/projectcapsule/capsule-proxy