CVE-2022-1632: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Red Hat Ansible Automation Platform: version 2.0 only
• Red Hat Openshift Container Platform: version 4.0 only

Published 2022-09-01. Last modified 2026-06-17.