CVE-2022-1632

An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.

• CWE-295
• CWE-295

• https://bugzilla.redhat.com/show_bug.cgi?id=2081181Issue Tracking, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2081181Issue Tracking, Vendor Advisory

Published

Sep 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1626The Sharebar WordPress plugin through 1.4.1 does not have CS…5.4
• CVE-2022-1627The My Private Site WordPress plugin before 3.0.8 does not h…4.3
• CVE-2022-1628The Simple SEO plugin for WordPress is vulnerable to attribu…5.4
• CVE-2022-1629Buffer Over-read in function find_next_quote in GitHub repos…7.8
• CVE-2022-1630The WP-EMail WordPress plugin before 2.69.0 does not protect…6.5
• CVE-2022-1631Users Account Pre-Takeover or Users Account Takeover. in Git…8.8
• CVE-2022-1633Use after free in Sharesheet in Google Chrome on Chrome OS p…8.8
• CVE-2022-1634Use after free in Browser UI in Google Chrome prior to 101.0…8.8
• CVE-2022-1635Use after free in Permission Prompts in Google Chrome prior …8.8
• CVE-2022-1636Use after free in Performance APIs in Google Chrome prior to…8.8
• CVE-2022-1637Inappropriate implementation in Web Contents in Google Chrom…4.3
• CVE-2022-1638Heap buffer overflow in V8 Internationalization in Google Ch…8.8