Skip to content
OpenAdvisories

Product · Mirantis

bored-agent

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-0270

    Improper header sanitization in bored-agent causes escalation of privilege

    Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups.

    Mirantis bored-agent