Vulnerabilities > CVE-2022-3262 - Insecure Default Initialization of Resource vulnerability in Redhat Openshift 4.9
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
HIGH Summary
A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |