CVE-2022-3259

Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.

Score

CVSS 3.1 7.4 High

Status

Modified - secalert@redhat.com

Published

2022-12-09

Last modified

2025-04-22

Weaknesses

CWE-665

Affected products

• Openshift (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2103220