[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbwdLZ5rrOLtwpVGYb8y_LgGpfzicpKW-ifdruPrT_zw":3,"g5a-risk:CVE-2022-27652":149},{"success":4,"data":5,"meta":147},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":65,"references":66,"referencesCount":78,"weaknesses":79,"weaknessesCount":88,"isActivelyExploited":89,"cisaInfo":26,"otxData":26,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":145,"notableEvents":146},"CVE-2022-27652","What is CVE-2022-27652?","A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.","A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) wh...","2022-04-18T17:15:16.977","2022-04-27T00:22:32.947",5.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","MEDIUM",null,1.8,3.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",4.6,3.9,6.4,0.00245,[38,38,38,38,38,38,38],"Medium",[42,47,52,57,62],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"kubernetes","cri-o","-","cpe:2.3:a:kubernetes:cri-o:-:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"fedoraproject","fedora","35","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"mobyproject","moby","*","cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"redhat","openshift_container_platform","3.11","cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":63,"criteria":64,"vulnerable":4},"4.0","cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",5,[67,73],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2066839","Red Hat",[71,72],"Issue Tracking","Third Party Advisory",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fgithub.com\u002Fcri-o\u002Fcri-o\u002Fsecurity\u002Fadvisories\u002FGHSA-4hj2-r2pm-3hc6","GitHub",[77,72],"Mitigation",2,[80],{"id":81,"name":82,"description":83,"extendedDescription":84,"status":85,"abstraction":86,"structure":87},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",1,false,[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2022-27652? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-27652, a medium severity cyber security vulnerability from 2022. A flaw was found in cri-o, where containers were incorrec...","CVE-2022-27652, CVE-2022-27652 vulnerability, CVE-2022-27652 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, kubernetes security, fedoraproject security, mobyproject security, redhat security, cri-o vulnerability, fedora vulnerability, moby vulnerability, openshift_container_platform vulnerability","\u002Fwhat-is\u002Fcve-2022-27652",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-27652","Cybersecurity","CVE-2022-27652, CVE-2022-27652 vulnerability, CVE-2022-27652 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117,124,130,137],{"Operator":26,"Negate":26,"Nodes":118},[119],{"Operator":120,"Negate":26,"CPEMatch":121},"OR",[122],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A283D260-73A3-481A-9E98-4C4604020B83",{"Operator":26,"Negate":26,"Nodes":125},[126],{"Operator":120,"Negate":26,"CPEMatch":127},[128],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"80E516C0-98A4-4ADE-B69F-66A772E2BAAA",{"Operator":26,"Negate":26,"Nodes":131},[132],{"Operator":120,"Negate":26,"CPEMatch":133},[134],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":136,"VersionEndIncluding":26},"251599F9-5922-4381-8D28-A663B2CEA315","20.10.14",{"Operator":26,"Negate":26,"Nodes":138},[139],{"Operator":120,"Negate":26,"CPEMatch":140},[141,143],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2F87326E-0B56-4356-A889-73D026DB1D4B",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":144,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"932D137F-528B-4526-9A89-CD59FA1AB0FE",[],[],{"lastModified":11,"cacheTime":148,"version":32},1792248926253,{"score":150,"band":151,"action":152,"scoredAt":153},16,"Info","Track","2026-10-16T06:54:09.721368+00:00"]