kritisch
CVE-2022-29226
envoy: oauth filter allows trivial bypass
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Red Hat10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Bitnami9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat, Bitnami. Niedriger laut Oracle (hoch).
Beschreibung
Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter implementation does not include a mechanism for validating access tokens, so by design when the HMAC signed cookie is missing a full authentication flow should be triggered. However, the current implementation assumes that access tokens are always validated thus allowing access in the presence of any access token attached to the request. Users are advised to upgrade. There is no known workaround for this issue.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | envoy | 1.22.1 |
| Oracle Linux 7 | cri-o, cri-tools, etcd und 19 weitere | 1.23.3-1.el7 und 7 weitere |
| Oracle Linux 8 | cri-o, cri-tools, etcd und 19 weitere | 1.23.3-1.el8 und 7 weitere |
Alle 45 Einträge aus 3 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | envoy | 1.22.1 |
| Oracle Linux 7 | cri-o | 1.23.3-1.el7 |
| Oracle Linux 7 | cri-tools | 1.23.0-1.el7 |
| Oracle Linux 7 | etcd | 3.5.1-2.el7 |
| Oracle Linux 7 | istio | 1.13.5-1.el7 |
| Oracle Linux 7 | istio-istioctl | 1.13.5-1.el7 |
| Oracle Linux 7 | kata | 1.12.1-5.el7 |
| Oracle Linux 7 | kubeadm | 1.23.7-1.el7 |
| Oracle Linux 7 | kubectl | 1.23.7-1.el7 |
| Oracle Linux 7 | kubelet | 1.23.7-1.el7 |
| Oracle Linux 7 | olcne-agent | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-api-server | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-gluster-chart | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-grafana-chart | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-istio-chart | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-metallb-chart | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-nginx | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-oci-ccm-chart | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-oci-csi-chart | 1.4.6-2.el7 |
| Oracle Linux 7 | olcne-olm-chart | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-prometheus-chart | 1.5.4-3.el7 |
| Oracle Linux 7 | olcne-utils | 1.5.4-3.el7 |
| Oracle Linux 7 | olcnectl | 1.5.4-3.el7 |
| Oracle Linux 8 | cri-o | 1.23.3-1.el8 |
| Oracle Linux 8 | cri-tools | 1.23.0-1.el8 |
| Oracle Linux 8 | etcd | 3.5.1-2.el8 |
| Oracle Linux 8 | istio | 1.13.5-1.el8 |
| Oracle Linux 8 | istio-istioctl | 1.13.5-1.el8 |
| Oracle Linux 8 | kata | 1.12.1-5.el8 |
| Oracle Linux 8 | kubeadm | 1.23.7-1.el8 |
| Oracle Linux 8 | kubectl | 1.23.7-1.el8 |
| Oracle Linux 8 | kubelet | 1.23.7-1.el8 |
| Oracle Linux 8 | olcne-agent | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-api-server | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-gluster-chart | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-grafana-chart | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-istio-chart | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-metallb-chart | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-nginx | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-oci-ccm-chart | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-oci-csi-chart | 1.4.6-2.el8 |
| Oracle Linux 8 | olcne-olm-chart | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-prometheus-chart | 1.5.4-3.el8 |
| Oracle Linux 8 | olcne-utils | 1.5.4-3.el8 |
| Oracle Linux 8 | olcnectl | 1.5.4-3.el8 |
Referenzen
- https://access.redhat.com/security/cve/CVE-2022-29226
- https://github.com/envoyproxy/envoy/commit/7ffda4e809dec74449ebc330cebb9d2f4ab61360
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-h45c-2f94-prxh
- https://linux.oracle.com/cve/CVE-2022-29226.html
- https://linux.oracle.com/errata/ELSA-2022-9589.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-29226
- https://www.cve.org/CVERecord?id=CVE-2022-29226