CVE-2022-3248

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Oct 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-324806.5Dell PowerScale OneFS, versions 9.0.0, up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an insecure default initializatCVE-2022-324817.8Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A CVE-2022-324825.1Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exCVE-2022-324834.4Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exCVE-2022-324844.4Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exCVE-2022-324857.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-324868.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-324877.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-324887.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-324897.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabiliCVE-2022-32497.2The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using them in a SQL statementCVE-2022-324907.8Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili
CVE-2022-3248: High severity, CVSS 7.5 | Vulnix