CVE-2022-4886 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-4886 Interim 1 7 2025-11-05T01:42:06Z current 2023-10-26T23:16:41Z 2025-11-05T01:42:06Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-4886 Ingress-nginx `path` sanitization can be bypassed with `log_format` directive. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/kb/doc/?id=000021265 E-Mail link for TID000021265 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes kubernetes-client kubernetes-common kubernetes-kubeadm kubernetes-kubelet kubernetes1.18 kubernetes1.18-client kubernetes1.18-client-common kubernetes1.23 kubernetes1.23-client kubernetes1.23-client-common kubernetes1.24 kubernetes1.24-client kubernetes1.24-client-common kubernetes1.25 kubernetes1.25-client kubernetes1.25-client-common kubernetes1.26 kubernetes1.26-client kubernetes1.26-client-common kubernetes1.27 kubernetes1.27-client kubernetes1.27-client-common kubernetes1.28 kubernetes1.28-client kubernetes1.28-client-common kubernetes-client as a component of SUSE CaaS Platform 4.0 kubernetes-common as a component of SUSE CaaS Platform 4.0 kubernetes-kubeadm as a component of SUSE CaaS Platform 4.0 kubernetes-kubelet as a component of SUSE CaaS Platform 4.0 kubernetes as a component of SUSE CaaS Platform 4.0 kubernetes1.18-client as a component of SUSE Enterprise Storage 7.1 kubernetes1.18-client-common as a component of SUSE Enterprise Storage 7.1 kubernetes1.18 as a component of SUSE Enterprise Storage 7.1 kubernetes1.23-client as a component of SUSE Enterprise Storage 7.1 kubernetes1.23-client-common as a component of SUSE Enterprise Storage 7.1 kubernetes1.23 as a component of SUSE Enterprise Storage 7.1 kubernetes1.24-client as a component of SUSE Enterprise Storage 7.1 kubernetes1.24-client-common as a component of SUSE Enterprise Storage 7.1 kubernetes1.24 as a component of SUSE Enterprise Storage 7.1 kubernetes-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kubernetes-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kubernetes as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kubernetes1.18-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kubernetes1.18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.18-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.23-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.23-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.24-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.24-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.24 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.18-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.18-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.23-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.23-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.24-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.24-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.24 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.18-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.18 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.23-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.23-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.23 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.24-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.24-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.24 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.25-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.25-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.25 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.26-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.26-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.26 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.27-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.27-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.27 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.28-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.28-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.28 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.23-client as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.23-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.23 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.24-client as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.24-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.24 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.25-client as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.25-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.25 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.26-client as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.26-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.26 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.27-client as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.27-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.27 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.28-client as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.28-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.28 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes-client as a component of SUSE Linux Enterprise Module for Public Cloud 12 kubernetes as a component of SUSE Linux Enterprise Module for Public Cloud 12 kubernetes-client as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kubernetes-common as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kubernetes as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kubernetes1.18-client-common as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kubernetes1.18 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.18-client-common as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.18 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.23-client as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.23-client-common as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.23 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.24-client as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.24-client-common as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.24 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kubernetes-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kubernetes as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kubernetes1.18-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kubernetes1.18-client-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kubernetes1.18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kubernetes1.18-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.18-client-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.23-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.23-client-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.23 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.24-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.24-client-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.24 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 Ingress-nginx `path` sanitization can be bypassed with `log_format` directive. CVE-2022-4886 SUSE CaaS Platform 4.0:kubernetes SUSE CaaS Platform 4.0:kubernetes-client SUSE CaaS Platform 4.0:kubernetes-common SUSE CaaS Platform 4.0:kubernetes-kubeadm SUSE CaaS Platform 4.0:kubernetes-kubelet SUSE Enterprise Storage 7.1:kubernetes1.18 SUSE Enterprise Storage 7.1:kubernetes1.18-client SUSE Enterprise Storage 7.1:kubernetes1.18-client-common SUSE Enterprise Storage 7.1:kubernetes1.23 SUSE Enterprise Storage 7.1:kubernetes1.23-client SUSE Enterprise Storage 7.1:kubernetes1.23-client-common SUSE Enterprise Storage 7.1:kubernetes1.24 SUSE Enterprise Storage 7.1:kubernetes1.24-client SUSE Enterprise Storage 7.1:kubernetes1.24-client-common SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kubernetes SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kubernetes-client SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kubernetes-common SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kubernetes1.18 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kubernetes1.18-client SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kubernetes1.18-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.18 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.18-client SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.18-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.23 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.23-client SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.23-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.24 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.24-client SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.24-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.18 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.18-client SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.18-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.23 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.23-client SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.23-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.24 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.24-client SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.24-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.18 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.18-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.18-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.23 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.23-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.23-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.24 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.24-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.24-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.25 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.25-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.25-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.26 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.26-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.26-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.27 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.27-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.27-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.28 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.28-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.28-client-common SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.23 SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.23-client SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.23-client-common SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.24 SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.24-client SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.24-client-common SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.25 SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.25-client SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.25-client-common SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.26 SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.26-client SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.26-client-common SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.27 SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.27-client SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.27-client-common SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.28 SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.28-client SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.28-client-common SUSE Linux Enterprise Module for Public Cloud 12:kubernetes SUSE Linux Enterprise Module for Public Cloud 12:kubernetes-client SUSE Linux Enterprise Server 15 SP1-LTSS:kubernetes SUSE Linux Enterprise Server 15 SP1-LTSS:kubernetes-client SUSE Linux Enterprise Server 15 SP1-LTSS:kubernetes-common SUSE Linux Enterprise Server 15 SP2-LTSS:kubernetes1.18 SUSE Linux Enterprise Server 15 SP2-LTSS:kubernetes1.18-client SUSE Linux Enterprise Server 15 SP2-LTSS:kubernetes1.18-client-common SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.18 SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.18-client SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.18-client-common SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.23 SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.23-client SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.23-client-common SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.24 SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.24-client SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.24-client-common SUSE Linux Enterprise Server for SAP Applications 15 SP1:kubernetes SUSE Linux Enterprise Server for SAP Applications 15 SP1:kubernetes-client SUSE Linux Enterprise Server for SAP Applications 15 SP1:kubernetes-common SUSE Linux Enterprise Server for SAP Applications 15 SP2:kubernetes1.18 SUSE Linux Enterprise Server for SAP Applications 15 SP2:kubernetes1.18-client SUSE Linux Enterprise Server for SAP Applications 15 SP2:kubernetes1.18-client-common SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.18 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.18-client SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.18-client-common SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.23 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.23-client SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.23-client-common SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.24 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.24-client SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.24-client-common important 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N