CVE-2022-2995
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
- Kubernetes Cri-o
- = 1.25.0
- CVSS 3.1
- 7.1 HIGH
- EPSS
- 0.4% (29th percentile)
- Weakness
- CWE-284, CWE-732
- NVD status
- Modified
- Published
- 2022-09-19
CVE-2022-2995 at NVD
No indexed exploits for CVE-2022-2995 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2022-2995 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.