Mirantis

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Mirantis records in CISA KEV

No Mirantis vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Bored-agent · all components

TI-2022-00204 CVE-2022-0270 · GHSA-r5c2-7hp9-v678

MEDIUM 40

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0088 Published 2022-01-25 Fixed in 0.6.1 CWE-284