Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-2hpe-2uac-q3b9
Vulnerability ID VCID-2hpe-2uac-q3b9
Aliases CVE-2022-0759
GHSA-69p3-xp37-f692
Summary Improper Certificate Validation in kubeclient
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-295 Improper Certificate Validation
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 8.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0759.json
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-0759
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-0759
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-0759
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-0759
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-69p3-xp37-f692
cvssv3.1 8.1 https://github.com/ManageIQ/kubeclient
generic_textual HIGH https://github.com/ManageIQ/kubeclient
cvssv3.1 8.1 https://github.com/ManageIQ/kubeclient/commit/109ea71de5a8881748f03ebbe103b49f0f1c7887
generic_textual HIGH https://github.com/ManageIQ/kubeclient/commit/109ea71de5a8881748f03ebbe103b49f0f1c7887
cvssv3 8.1 https://github.com/ManageIQ/kubeclient/issues/554
cvssv3.1 8.1 https://github.com/ManageIQ/kubeclient/issues/554
generic_textual HIGH https://github.com/ManageIQ/kubeclient/issues/554
cvssv3.1 8.1 https://github.com/ManageIQ/kubeclient/issues/555
generic_textual HIGH https://github.com/ManageIQ/kubeclient/issues/555
cvssv3.1 8.1 https://github.com/ManageIQ/kubeclient/pull/556
generic_textual HIGH https://github.com/ManageIQ/kubeclient/pull/556
cvssv3.1 8.1 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kubeclient/CVE-2022-0759.yml
generic_textual HIGH https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kubeclient/CVE-2022-0759.yml
cvssv3.1 8.1 https://nvd.nist.gov/vuln/detail/CVE-2022-0759
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2022-0759
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0759.json
https://api.first.org/data/v1/epss?cve=CVE-2022-0759
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0759
https://github.com/ManageIQ/kubeclient
https://github.com/ManageIQ/kubeclient/commit/109ea71de5a8881748f03ebbe103b49f0f1c7887
https://github.com/ManageIQ/kubeclient/issues/554
https://github.com/ManageIQ/kubeclient/issues/555
https://github.com/ManageIQ/kubeclient/pull/556
1014780 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014780
2058404 https://bugzilla.redhat.com/show_bug.cgi?id=2058404
CVE-2022-0759 https://nvd.nist.gov/vuln/detail/CVE-2022-0759
CVE-2022-0759.YML https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kubeclient/CVE-2022-0759.yml
GHSA-69p3-xp37-f692 https://github.com/advisories/GHSA-69p3-xp37-f692
RHSA-2022:1461 https://access.redhat.com/errata/RHSA-2022:1461
RHSA-2022:2217 https://access.redhat.com/errata/RHSA-2022:2217
RHSA-2022:2218 https://access.redhat.com/errata/RHSA-2022:2218
RHSA-2022:6051 https://access.redhat.com/errata/RHSA-2022:6051
RHSA-2023:6818 https://access.redhat.com/errata/RHSA-2023:6818
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0759.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/ManageIQ/kubeclient
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/ManageIQ/kubeclient/commit/109ea71de5a8881748f03ebbe103b49f0f1c7887
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/ManageIQ/kubeclient/issues/554
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/ManageIQ/kubeclient/issues/555
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/ManageIQ/kubeclient/pull/556
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kubeclient/CVE-2022-0759.yml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-0759
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.33349
EPSS Score 0.00136
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:28:34.883214+00:00 GHSA Importer Import https://github.com/advisories/GHSA-69p3-xp37-f692 38.6.0