Skip to content
OpenAdvisories

Vendor

Mirantis

5 known vulnerabilities.

Products

Lens 2 Mirantis Container Runtime 1 bored-agent 1 Mirantis Container Cloud Lens Extension 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2022-0484

    Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs

    Lack of validation of URLs causes Mirantis Container Cloud Lens Extension before v3.1.1 to open external programs other than the default browser to perform sign on to a new cluster. An attacker could host a webserver which serves a malicious Mirantis Containe…

    Mirantis Mirantis Container Cloud Lens Extension
  • High 8.8
    CVE-2022-0270

    Improper header sanitization in bored-agent causes escalation of privilege

    Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups.

    Mirantis bored-agent
  • High 8.3
    CVE-2021-44458

    Lack of websocket authentication in Lens causes remote code execution when visiting a malicious website

    Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website could make websocket connections from the victim's browser to Lens and so operate the local terminal feature. This would allow the attacker …

    Mirantis Lens