CVE-2022-3259: Red Hat Openshift

High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.

Affected products

• Red Hat Openshift: version 4.9 only

Published 2022-12-09. Last modified 2026-06-17.