CVE-2022-28224 - OpenCVE

Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Due to insufficient validation, a privileged attacker may be able to set a floating IP annotation to a pod even if the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:S/C:N/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Tigera	Calico Calico Enterprise

Configuration 1 [-]

OR	cpe:2.3:a:tigera:calico:::::open_source:::*
	cpe:2.3:a:tigera:calico:::::open_source:::*
	cpe:2.3:a:tigera:calico:::::open_source:::*
	cpe:2.3:a:tigera:calico_enterprise::::::::
	cpe:2.3:a:tigera:calico_enterprise:3.12.0:::::::*

No data.

References

Link	Providers
https://www.tigera.io/security-bulletins-tta-2022-001/

History

Tue, 30 Sep 2025 19:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tigera calico
CPEs	cpe:2.3:o:tigera:calico_os::::::::	cpe:2.3:a:tigera:calico:::::open_source:::*
Vendors & Products	Tigera calico Os	Tigera calico

MITRE

Status: PUBLISHED

Assigner: Tigera

Published: 2022-06-06T17:19:12.810566Z

Updated: 2024-09-16T20:31:41.256Z

Reserved: 2022-03-30T00:00:00

Link: CVE-2022-28224

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2022-06-06T18:15:09.360

Modified: 2025-09-30T18:45:43.153

Link: CVE-2022-28224

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Calico Enterprise", "vendor": "Tigera", "versions": [{"lessThanOrEqual": "v3.12.0", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Calico", "vendor": "Project Calico", "versions": [{"lessThanOrEqual": "v3.22.1", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "datePublic": "2022-06-01T00:00:00", "descriptions": [{"lang": "en", "value": "Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Due to insufficient validation, a privileged attacker may be able to set a floating IP annotation to a pod even if the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "description": "CWE-200 Information Exposure", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-201", "description": "CWE-201 Information Exposure Through Sent Data", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-06-06T17:19:12", "orgId": "e6d453f4-3dae-4941-bcea-9af25f4e824d", "shortName": "Tigera"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.tigera.io/security-bulletins-tta-2022-001/"}], "title": "Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "DATE_PUBLIC": "2022-06-01T21:01:00.000Z", "ID": "CVE-2022-28224", "STATE": "PUBLIC", "TITLE": "Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Calico Enterprise", "version": {"version_data": [{"version_affected": "<=", "version_value": "v3.12.0"}]}}]}, "vendor_name": "Tigera"}, {"product": {"product_data": [{"product_name": "Calico", "version": {"version_data": [{"version_affected": "<=", "version_value": "v3.22.1"}]}}]}, "vendor_name": "Project Calico"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Due to insufficient validation, a privileged attacker may be able to set a floating IP annotation to a pod even if the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-200 Information Exposure"}]}, {"description": [{"lang": "eng", "value": "CWE-201 Information Exposure Through Sent Data"}]}]}, "references": {"reference_data": [{"name": "https://www.tigera.io/security-bulletins-tta-2022-001/", "refsource": "MISC", "url": "https://www.tigera.io/security-bulletins-tta-2022-001/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T05:48:37.378Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.tigera.io/security-bulletins-tta-2022-001/"}]}]}, "cveMetadata": {"assignerOrgId": "e6d453f4-3dae-4941-bcea-9af25f4e824d", "assignerShortName": "Tigera", "cveId": "CVE-2022-28224", "datePublished": "2022-06-06T17:19:12.810566Z", "dateReserved": "2022-03-30T00:00:00", "dateUpdated": "2024-09-16T20:31:41.256Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:*", "matchCriteriaId": "162FAB6F-BD82-4E43-B77C-8951E2DAA134", "versionEndExcluding": "3.20.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:*", "matchCriteriaId": "AAD77006-92F6-4BEA-95F3-799B4A2D30D0", "versionEndExcluding": "3.21.5", "versionStartIncluding": "3.21.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:*", "matchCriteriaId": "84190BD4-C9DF-4DFA-A74C-2F32DCF58316", "versionEndExcluding": "3.22.2", "versionStartIncluding": "3.22.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:tigera:calico_enterprise:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E4832D7-F220-4771-8B01-54327CB11938", "versionEndExcluding": "3.11.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:tigera:calico_enterprise:3.12.0:*:*:*:*:*:*:*", "matchCriteriaId": "C6F8BCF7-776F-4B3B-AE3D-3004DA243527", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Due to insufficient validation, a privileged attacker may be able to set a floating IP annotation to a pod even if the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod."}, {"lang": "es", "value": "Los cl\u00fasteres usando Calico (versiones 3.22.1 y anteriores), Calico Enterprise (versiones 3.12.0 y anteriores), pueden ser vulnerables al secuestro de rutas con la funci\u00f3n de IP flotante. Debido a una comprobaci\u00f3n insuficiente, un atacante privilegiado puede ser capaz de establecer una anotaci\u00f3n de IP flotante a un pod incluso si la caracter\u00edstica no est\u00e1 habilitada. Esto puede permitir al atacante interceptar y redirigir el tr\u00e1fico a su pod comprometido"}], "id": "CVE-2022-28224", "lastModified": "2025-09-30T18:45:43.153", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 5.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 4.2, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 4.2, "source": "[email protected]", "type": "Primary"}]}, "published": "2022-06-06T18:15:09.360", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://www.tigera.io/security-bulletins-tta-2022-001/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.tigera.io/security-bulletins-tta-2022-001/"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-201"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "[email protected]", "type": "Primary"}]}