{"metadata": {"vulnerability": "cve-2022-27652", "count": 35, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 27}}, "data": [{"timestamp": "2022-03-22T00:00:00Z", "date_only": false, "value": "2022-03-22T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHBA-2022:5433", "record": "RHBA-2022:5433", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2022-03-22T00:00:00Z", "date_only": false, "value": "2022-03-22T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2022-03-22T00:00:00Z", "date_only": false, "value": "2022-03-22T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-27652", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-30T12:00:00Z", "date_only": false, "value": "2022-03-30T12:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHBA-2022:5433", "record": "RHBA-2022:5433", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-03-30T12:00:00Z", "date_only": false, "value": "2022-03-30T12:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-04-12T00:00:00Z", "date_only": false, "value": "2022-04-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2022-04-18T16:20:29Z", "date_only": false, "value": "2022-04-18T16:20:29.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-27652", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-18T16:20:29Z", "date_only": false, "value": "2022-04-18T16:20:29.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "cve-2022-27652", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-04-18T17:15:00Z", "date_only": false, "value": "2022-04-18T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4HJ2-R2PM-3HC6", "record": "GHSA-4HJ2-R2PM-3HC6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-18T17:15:00Z", "date_only": false, "value": "2022-04-18T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-27652", "record": "GSD-2022-27652", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-18T17:15:16.977Z", "date_only": false, "value": "2022-04-18T17:15:16.977", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-27652", "record": "FKIE_CVE-2022-27652", "field": "published"}, {"timestamp": "2022-04-18T20:29:44Z", "date_only": false, "value": "2022-04-18T20:29:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/41043", "record": "CVE-2022-27652", "field": "creation_timestamp", "uuid": "9739564e-f848-426d-94a8-bcb908482a47", "content": "\u203c CVE-2022-27652 \u203c\n\nA flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/41043"}, {"timestamp": "2022-04-22T00:00:00Z", "date_only": true, "value": "2022-04-22", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-27652", "record": "GSD-2022-27652", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-04-22T00:00:00Z", "date_only": true, "value": "2022-04-22", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-27652", "record": "GSD-2022-27652", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-04-22T20:42:46Z", "date_only": false, "value": "2022-04-22T20:42:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4HJ2-R2PM-3HC6", "record": "GHSA-4HJ2-R2PM-3HC6", "field": "published"}, {"timestamp": "2022-04-27T00:22:00Z", "date_only": false, "value": "2022-04-27T00:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-27652", "record": "GSD-2022-27652", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-04-28T18:10:23Z", "date_only": false, "value": "2022-04-28T18:10:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4HJ2-R2PM-3HC6", "record": "GHSA-4HJ2-R2PM-3HC6", "field": "modified"}, {"timestamp": "2022-05-02T18:23:40Z", "date_only": false, "value": "2022-05-02T18:23:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-05-02T18:23:40Z", "date_only": false, "value": "2022-05-02T18:23:40+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-05-02T18:23:40Z", "date_only": false, "value": "2022-05-02T18:23:40+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-05T21:06:52Z", "date_only": false, "value": "2022-07-05T21:06:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHBA-2022:5433", "record": "RHBA-2022:5433", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-05T21:06:52Z", "date_only": false, "value": "2022-07-05T21:06:52+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHBA-2022:5433", "record": "RHBA-2022:5433", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-07-05T21:06:52Z", "date_only": false, "value": "2022-07-05T21:06:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHBA-2022:5433", "record": "RHBA-2022:5433", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-15T18:25:30Z", "date_only": false, "value": "2023-09-15T18:25:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/70595", "record": "CVE-2022-27652", "field": "creation_timestamp", "uuid": "d7da233b-2cc9-4a42-93a7-98c4994718cd", "content": "\u203c CVE-2022-3466 \u203c\n\nThe version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022-27652, which was previously fixed in OCP 4.9.41 and 4.10.12 via RHBA-2022:5433 and RHSA-2022:1600. This issue could allow an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. For more details, see https://access.redhat.com/security/cve/CVE-2022-27652.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70595"}, {"timestamp": "2023-12-13T01:19:40.965Z", "date_only": false, "value": "2023-12-13T01:19:40.965662Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-27652", "record": "GSD-2022-27652", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T05:32:59.921Z", "date_only": false, "value": "2024-08-03T05:32:59.921Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-27652", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T05:32:59.921Z", "date_only": false, "value": "2024-08-03T05:32:59.921Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-27652", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-21T17:23:12Z", "date_only": false, "value": "2025-11-21T17:23:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHBA-2022:5433", "record": "RHBA-2022:5433", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T17:23:12Z", "date_only": false, "value": "2025-11-21T17:23:12+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHBA-2022:5433", "record": "RHBA-2022:5433", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T17:23:12Z", "date_only": false, "value": "2025-11-21T17:23:12+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHBA-2022:5433", "record": "RHBA-2022:5433", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-11-21T18:30:11Z", "date_only": false, "value": "2025-11-21T18:30:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T18:30:11Z", "date_only": false, "value": "2025-11-21T18:30:11+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T18:30:11Z", "date_only": false, "value": "2025-11-21T18:30:11+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:1600", "record": "RHSA-2022:1600", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T04:37:25.690Z", "date_only": false, "value": "2026-06-17T04:37:25.690", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-27652", "record": "FKIE_CVE-2022-27652", "field": "lastModified"}]}