{"id":"CVE-2022-47633","details":"An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.","aliases":["BIT-kyverno-2022-47633","GHSA-m3cq-xcx9-3gvm","GO-2022-1180"],"modified":"2026-08-12T03:51:09.815789736Z","published":"2022-12-23T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/47xxx/CVE-2022-47633.json"},"references":[{"type":"WEB","url":"https://github.com/kyverno/kyverno/compare/v1.8.4...v1.8.5"},{"type":"WEB","url":"https://github.com/kyverno/kyverno/releases/tag/v1.8.5"},{"type":"WEB","url":"https://kyverno.io/docs/writing-policies/verify-images/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/47xxx/CVE-2022-47633.json"},{"type":"ADVISORY","url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-m3cq-xcx9-3gvm"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-47633"},{"type":"FIX","url":"https://github.com/kyverno/kyverno/pull/5713"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kyverno/kyverno","events":[{"introduced":"44604bf74bdafc4b199dc28e1eed14ed42dfa27e"},{"fixed":"c19061758dc4203106ab6d87a245045c20192721"}],"database_specific":{"extracted_events":[{"introduced":"1.8.3"},{"last_affected":"1.8.3"},{"introduced":"1.8.4"},{"last_affected":"1.8.4"}],"source":["CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:kyverno:kyverno:1.8.3:*:*:*:*:*:*:*","cpe:2.3:a:kyverno:kyverno:1.8.4:*:*:*:*:*:*:*"]}}],"versions":["1.8.3","1.8.4","v1.8.5-rc.1","kyverno-policies-chart-2.6.5-rc.1","kyverno-chart-2.6.5-rc.1","v1.8.4","kyverno-policies-chart-2.6.4","kyverno-chart-2.6.4","v1.8.4-rc.1","kyverno-policies-chart-2.6.4-rc.1","kyverno-chart-2.6.4-rc.1","v1.8.3","kyverno-policies-chart-2.6.3","kyverno-chart-2.6.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-47633.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}