CVE-2022-3262: Red Hat Openshift

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.

Affected products

• Red Hat Openshift: version 4.9 only

Published 2022-12-08. Last modified 2026-06-17.