CVE-2022-2238

A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend. This flaw allows an attacker to craft specific strings containing special characters that lead to crashing the pod and affects system availability while restarting.

• CWE-89
• CWE-89

• https://access.redhat.com/security/cve/CVE-2022-2238Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2101669Issue Tracking, Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2022-2238Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2101669Issue Tracking, Vendor Advisory

Published

Sep 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22370IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and…5.4
• CVE-2022-22371IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through…6.5
• CVE-2022-22373An improper validation vulnerability in IBM InfoSphere Infor…5.4
• CVE-2022-22374The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) m…9.1
• CVE-2022-22375 IBM Security Verify Privilege On-Premises 11.5 could allow …8.8
• CVE-2022-22377IBM Security Verify Privilege On-Premises 11.5 could allow a…5.3
• CVE-2022-22380 IBM Security Verify Privilege On-Premises 11.5 could allow …4.3
• CVE-2022-22384 IBM Security Verify Privilege On-Premises 11.5 could allow …4.3
• CVE-2022-22385 IBM Security Verify Privilege On-Premises 11.5 could disclo…7.5
• CVE-2022-22386 IBM Security Verify Privilege On-Premises 11.5 could allow …5.9
• CVE-2022-22387IBM Application Gateway is vulnerable to cross-site scriptin…5.4
• CVE-2022-22389IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, a…6.5