CVSS 3.1
8.1 highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-47633
High (8.1) in kyverno kyverno. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in github.com/kyverno/kyverno 1.8.5.
An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kyverno:kyverno
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-m3cq-xcx9-3gvm | Go | github.com/kyverno/kyverno | >=1.8.3 <1.8.5 | 1.8.5 |
| GO-2022-1180 | Go | github.com/kyverno/kyverno | >=1.8.3 <1.8.5 | 1.8.5 |