CVE-2022-1677

CVE-2022-1677 is a medium-severity vulnerability affecting Red Hat OpenShift Container Platform. It allows an authenticated user with Route creation/modification privileges to inject a malformed entry into the HAProxy configuration, redirecting traffic for arbitrary hostnames to an attacker-controlled application within the cluster. The CVSS score of 6.3 indicates a network-based attack with low complexity, requiring low privileges, and resulting in low impact to confidentiality, integrity, and availability. While the EPSS score is low, suggesting a low probability of exploitation, the FAUCET Risk Score is 34/100. Currently, there is no evidence of active exploitation, nor are there public exploit codes available in Metasploit, Nuclei, or ExploitDB. The vulnerability has also received minimal community discussion and media coverage.