Mirantis

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Mirantis records in CISA KEV

No Mirantis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lens 2 records MEDIUM Bored-agent 1 record MEDIUM Container Cloud Lens Extension 1 record MEDIUM Mirantis Container Runtime 1 record LOW

Records

2 records in Lens · all components

TI-2021-20068 CVE-2021-44458

Lack of websocket authentication in Lens causes remote code execution when visiting a malicious website

MEDIUM 42

Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00446 Published 2022-01-10 No fix listed CWE-287

TI-2021-05936 CVE-2021-23154 · GHSA-j79q-frp5-24gc

Code injection in Mirantis Lens

LOW 35

In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are then executed in the user's shell.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00624 Published 2022-01-10 No fix listed CWE-94

Open these records in search →

Critical	1
High	4
Medium	0
Low	0
No CVSS	0