CVE-2022-1706 Ignition config accessible to unprivileged software on VMware
Attackers can read Ignition configs containing secrets from unprivileged containers in VMware VMs, compromising data confidentiality.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-1706?
CVE-2022-1706 is a medium-severity vulnerability in Fedoraproject Fedora, published on 17 May 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data confidentiality. Possible workaround is to not put secrets in the Ignition config.
Weakness: CWE-863
Which versions are affected by CVE-2022-1706?
6 open source packages ship an affected version, including github.com/coreos/ignition and github.com/coreos/ignition/v2. It affects 4 products.
| Package | Affected | Fixed in |
|---|---|---|
github.com/coreos/ignition Go | All versions | None |
github.com/coreos/ignition Go | All versions | 2.14.0 |
github.com/coreos/ignition Go | All versions | 2.14.0 |
github.com/coreos/ignition/v2 Go | All versions | 2.14.0 |
github.com/coreos/ignition/v2 Go | All versions | 2.14.0 |
github.com/coreos/ignition/v2 Go | All versions | 2.14.0 |
Linux distribution packages (16)
ignition AlmaLinux:9 | All versions | 2.14.0-1.el9 |
ignition Red Hat:enterprise_linux:9::appstream | All versions | 0:2.14.0-1.el9 |
ignition-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.14.0-1.el9 |
ignition-debugsource Red Hat:enterprise_linux:9::appstream | All versions | 0:2.14.0-1.el9 |
ignition-validate-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.14.0-1.el9 |
ignition Rocky Linux:9 | All versions | 0:2.14.0-1.el9 |
ignition SUSE:Linux Enterprise Micro 5.1 | All versions | 2.14.0-150300.4.7.1 |
systemd-presets-common-SUSE SUSE:Linux Enterprise Micro 5.1 | All versions | 15-150100.8.17.1 |
ignition SUSE:Linux Enterprise Micro 5.2 | All versions | 2.14.0-150300.6.7.1 |
systemd-presets-common-SUSE SUSE:Linux Enterprise Micro 5.2 | All versions | 15-150100.8.17.1 |
systemd-presets-common-SUSE SUSE:Linux Enterprise Module for Basesystem 15 SP3 | All versions | 15-150100.8.17.1 |
systemd-presets-common-SUSE SUSE:Linux Enterprise Module for Basesystem 15 SP4 | All versions | 15-150100.8.17.1 |
systemd-presets-common-SUSE openSUSE:Leap 15.3 | All versions | 15-150100.8.17.1 |
systemd-presets-common-SUSE openSUSE:Leap 15.4 | All versions | 15-150100.8.17.1 |
ignition openSUSE:Leap Micro 5.2 | All versions | 2.14.0-150300.6.7.1 |
systemd-presets-common-SUSE openSUSE:Leap Micro 5.2 | All versions | 15-150100.8.17.1 |
Products include Fedoraproject Fedora, Redhat Enterprise Linux, Redhat Ignition, Redhat Openshift Container Platform.
How do I fix CVE-2022-1706?
Upgrade github.com/coreos/ignition to 2.14.0 or later.
Is CVE-2022-1706 being exploited?
There is no known exploitation of CVE-2022-1706 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as ALSA-2022:8126, DEBIAN-CVE-2022-1706, GHSA-hj57-j5cw-2mwp, GO-2022-0451, MINI-366g-cq48-c6mj, RHSA-2022:8126 and 7 more.