{"schema_version":"1.9.0","id":"CVE-2022-3294","published":"2023-03-01T00:00:00Z","modified":"2026-08-12T03:51:09.949456243Z","aliases":["GHSA-jh36-q97c-9928","GO-2023-1629"],"related":["SUSE-SU-2023:2292-1","openSUSE-SU-2024:12737-1","openSUSE-SU-2024:12780-1","openSUSE-SU-2024:12781-1","openSUSE-SU-2024:12810-1","openSUSE-SU-2025:15424-1"],"summary":"Node address isn't always verified when proxying","details":"Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to establish connections to Pods, retrieve container logs, and more. While Kubernetes already validates the proxying address for Nodes, a bug in kube-apiserver made it possible to bypass this validation. Bypassing this validation could allow authenticated requests destined for Nodes to to the API server's private network.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubelet","events":[{"introduced":"0"},{"fixed":"8101aa62e43b04b5092715d892c7e6b08ee1b9d0"},{"introduced":"b1292eb3207057f0274a51330ba8d612f4faadd6"},{"fixed":"d81cda24db83d0ae4082a6d84ed5d208598021db"},{"introduced":"dfb3e7ad852bb4bddb790a705c185cef198c2823"},{"fixed":"0f3bf5c4007b7cdaedd76a42d5a596996ee5b085"},{"introduced":"d37f045d808033445aaa284ad80454c948b37958"},{"fixed":"8faa8adc2ecf68ad1c3be07cbec7ba900e2538a4"}],"database_specific":{"cpe":"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.22.16"},{"introduced":"1.23.0"},{"fixed":"1.23.14"},{"introduced":"1.24.0"},{"fixed":"1.24.8"},{"introduced":"1.25.0"},{"fixed":"1.25.4"}],"source":"CPE_RANGE"}},{"type":"GIT","repo":"https://github.com/kubernetes/kubernetes","events":[{"introduced":"0"},{"fixed":"b28e1f370a4a4c428ddbeababcaf0198f048fcac"},{"introduced":"ab69524f795c42094a6630298ff53f3c3ebab7f4"},{"fixed":"3321ffc07d2f046afdf613796f9032f4460de093"},{"introduced":"4ce5a8954017644c5420bae81d72b09b735c21f0"},{"fixed":"fdc77503e954d1ee641c0e350481f7528e8d068b"},{"introduced":"a866cbe2e5bbaa01cfd5e969aa3e033f3282a8a2"},{"fixed":"872a965c6c6526caa949f0c6ac028ef7aff3fb78"}],"database_specific":{"cpe":"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.22.16"},{"introduced":"1.23.0"},{"fixed":"1.23.14"},{"introduced":"1.24.0"},{"fixed":"1.24.8"},{"introduced":"1.25.0"},{"fixed":"1.25.4"}],"source":"CPE_RANGE"}}],"versions":["kubernetes-1.9.0-alpha.3","kubernetes-1.9.0-alpha.2","kubernetes-1.9.0-alpha.1","kubernetes-1.9.0-alpha.0","kubernetes-1.13.0-alpha.0","kubernetes-1.12.0-beta.0","kubernetes-1.12.0-alpha.1","kubernetes-1.12.0-alpha.0","kubernetes-1.11.0-alpha.2","kubernetes-1.11.0-alpha.1","kubernetes-1.11.0-alpha.0","kubernetes-1.10.0-alpha.3","kubernetes-1.10.0-alpha.2","kubernetes-1.10.0-alpha.1","kubernetes-1.10.0-alpha.0","v1.25.4-rc.0","v1.23.14-rc.0","v1.24.8-rc.0","v1.23.13","v1.24.7","v1.25.3","v1.25.3-rc.0","v1.25.2","v1.24.7-rc.0","v1.23.13-rc.0","v1.24.6","v1.22.16-rc.0","v1.23.12","v1.22.15","v1.22.15-rc.0","v1.22.14","v1.25.2-rc.0","v1.25.1","v1.23.12-rc.0","v1.24.6-rc.0","v1.24.5","v1.23.11","v1.25.1-rc.0","v1.25.0","v1.24.5-rc.0","v1.23.11-rc.0","v1.22.14-rc.0","v1.24.4","v1.23.10","v1.22.13","v1.22.13-rc.0","v1.24.4-rc.0","v1.23.10-rc.0","v1.22.12","v1.24.3","v1.23.9","v1.23.9-rc.0","v1.22.12-rc.0","v1.23.8","v1.22.11","v1.24.3-rc.0","v1.24.2","v1.22.11-rc.0","v1.23.8-rc.0","v1.24.2-rc.0","v1.22.10","v1.23.7","v1.24.1","v1.24.1-rc.0","v1.24.0","v1.23.7-rc.0","v1.23.6","v1.22.10-rc.0","v1.22.9","v1.23.6-rc.0","v1.23.5","v1.22.9-rc.0","v1.22.8","v1.23.5-rc.0","v1.22.8-rc.0","v1.23.4","v1.22.7","v1.23.4-rc.0","v1.23.3","v1.23.3-rc.0","v1.22.7-rc.0","v1.23.2","v1.22.6","v1.23.2-rc.0","v1.23.1","v1.22.6-rc.0","v1.22.5","v1.23.1-rc.0","v1.23.0","v1.22.5-rc.0","v1.22.4","v1.22.4-rc.0","v1.22.3","v1.22.3-rc.0","v1.22.2","v1.22.2-rc.0","v1.22.1","v1.22.1-rc.0","v1.22.0","v1.22.0-rc.0","v1.23.0-alpha.0","v1.22.0-beta.2","v1.22.0-beta.1","v1.22.0-beta.0","v1.22.0-alpha.3","v1.22.0-alpha.2","v1.22.0-alpha.1","v1.22.0-alpha.0","v1.21.0-beta.1","v1.21.0-beta.0","v1.21.0-alpha.3","v1.21.0-alpha.2","v1.21.0-alpha.1","v1.21.0-alpha.0","v1.20.0-beta.2","v1.20.0-beta.1","v1.20.0-beta.0","v1.20.0-alpha.3","v1.20.0-alpha.2","v1.20.0-alpha.1","v1.20.0-alpha.0","v1.19.0-beta.2","v1.19.0-beta.1","v1.19.0-beta.0","v1.19.0-alpha.3","v1.19.0-alpha.2","v1.19.0-alpha.1","v1.19.0-alpha.0","v1.18.0-alpha.5","v1.18.0-alpha.4","v1.18.0-alpha.2","v1.18.0-alpha.1","v1.18.0-alpha.0","v1.17.0-alpha.3","v1.17.0-alpha.1","v1.17.0-alpha.2","v1.17.0-alpha.0","v1.16.0-alpha.3","v1.16.0-alpha.2","v1.16.0-alpha.1","v1.16.0-alpha.0","v1.15.0-alpha.3","v1.15.0-alpha.2","v1.15.0-alpha.1","v1.14.0-alpha.3","v1.15.0-alpha.0","v1.14.0-alpha.2","v1.14.0-alpha.1","v1.14.0-alpha.0","v1.13.0-alpha.3","v1.13.0-alpha.2","v1.13.0-alpha.1","v1.13.0-alpha.0","v1.12.0-alpha.1","v1.12.0-alpha.0","v1.11.0-alpha.2","v1.11.0-alpha.1","v1.11.0-alpha.0","v1.10.0-alpha.3","v1.10.0-alpha.2","v1.10.0-alpha.1","v1.9.0-alpha.3","v1.10.0-alpha.0","v1.9.0-alpha.2","v1.9.0-alpha.1","v1.9.0-alpha.0","v1.8.0-alpha.3","v1.8.0-alpha.2","v1.8.0-alpha.0","v1.8.0-alpha.1","v1.7.0-alpha.4","v1.7.0-alpha.3","v1.7.0-alpha.2","v1.7.0-alpha.1","v1.7.0-alpha.0","v1.6.0-alpha.3","v1.6.0-alpha.2","v1.6.0-alpha.1","v1.6.0-alpha.0","v1.5.0-alpha.2","v1.5.0-alpha.1","v1.5.0-alpha.0","v1.4.0-alpha.3","v1.4.0-alpha.1","v1.4.0-alpha.2","v1.3.0-alpha.5","v1.3.0-alpha.4","v1.3.0-alpha.3","v1.3.0-alpha.1","v1.3.0-alpha.2","v1.3.0-alpha.0","v1.2.0-alpha.8","v1.2.0-alpha.7","v1.2.0-alpha.6","v1.2.0-alpha.5","v1.2.0-alpha.4","v1.2.0-alpha.3","v1.2.0-alpha.2","v1.2.0-alpha.1","v1.1.0-alpha.1","v1.1.0-alpha.0","v0.17.0","v0.13.1-dev"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3294.json"}}],"references":[{"type":"WEB","url":"https://groups.google.com/g/kubernetes-security-announce/c/VyPOxF7CIbA"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3294.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3294"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20230505-0007/"},{"type":"REPORT","url":"https://github.com/kubernetes/kubernetes/issues/113757"}],"database_specific":{"cna_assigner":"kubernetes","cwe_ids":["CWE-20"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3294.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"}]}