Read the docs
Red Hat Security Advisory

RHSA-2022:8126

ignition security, bug fix, and enhancement update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

TI-2022-01572 CVE-2022-1706 · GHSA-hj57-j5cw-2mwp

Incorrect authorization in coreos/ignition

Priority LOW 31

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01298 Published 2022-05-17 Fixed in 2.14.0 CWE-863