Search for vulnerabilities
Vulnerability details: VCID-av3y-xjr9-aaac
Vulnerability ID VCID-av3y-xjr9-aaac
Aliases CVE-2022-29226
Summary Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter implementation does not include a mechanism for validating access tokens, so by design when the HMAC signed cookie is missing a full authentication flow should be triggered. However, the current implementation assumes that access tokens are always validated thus allowing access in the presence of any access token attached to the request. Users are advised to upgrade. There is no known workaround for this issue.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-306 Missing Authentication for Critical Function
CWE-303 Incorrect Implementation of Authentication Algorithm
System Score Found at
rhas Critical https://access.redhat.com/errata/RHSA-2022:5004
cvssv3 10.0 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-29226.json
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00125 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00125 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00125 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00125 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
epss 0.00135 https://api.first.org/data/v1/epss?cve=CVE-2022-29226
rhbs urgent https://bugzilla.redhat.com/show_bug.cgi?id=2088739
cvssv3.1 10 https://github.com/envoyproxy/envoy/commit/7ffda4e809dec74449ebc330cebb9d2f4ab61360
ssvc Track https://github.com/envoyproxy/envoy/commit/7ffda4e809dec74449ebc330cebb9d2f4ab61360
cvssv3.1 10 https://github.com/envoyproxy/envoy/security/advisories/GHSA-h45c-2f94-prxh
ssvc Track https://github.com/envoyproxy/envoy/security/advisories/GHSA-h45c-2f94-prxh
cvssv2 6.4 https://nvd.nist.gov/vuln/detail/CVE-2022-29226
cvssv3 9.1 https://nvd.nist.gov/vuln/detail/CVE-2022-29226
cvssv3.1 9.1 https://nvd.nist.gov/vuln/detail/CVE-2022-29226
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-29226.json
https://api.first.org/data/v1/epss?cve=CVE-2022-29226
https://github.com/envoyproxy/envoy/commit/7ffda4e809dec74449ebc330cebb9d2f4ab61360
https://github.com/envoyproxy/envoy/security/advisories/GHSA-h45c-2f94-prxh
2088739 https://bugzilla.redhat.com/show_bug.cgi?id=2088739
cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
CVE-2022-29226 https://nvd.nist.gov/vuln/detail/CVE-2022-29226
ISTIO-SECURITY-2022-005 https://istio.io/latest/news/security/ISTIO-SECURITY-2022-005/
RHSA-2022:5004 https://access.redhat.com/errata/RHSA-2022:5004
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-29226.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Found at https://github.com/envoyproxy/envoy/commit/7ffda4e809dec74449ebc330cebb9d2f4ab61360
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:49:18Z/ Found at https://github.com/envoyproxy/envoy/commit/7ffda4e809dec74449ebc330cebb9d2f4ab61360
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Found at https://github.com/envoyproxy/envoy/security/advisories/GHSA-h45c-2f94-prxh
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:49:18Z/ Found at https://github.com/envoyproxy/envoy/security/advisories/GHSA-h45c-2f94-prxh
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-29226
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-29226
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-29226
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.04847
EPSS Score 0.00028
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.