Code injection

2022-01-2520:15:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups.

CPENameOperatorVersion
bored-agentlt0.6.1

CPE	Name	Operator	Version
	bored-agent	lt	0.6.1

References

github.com/Mirantis/security/blob/main/advisories/0004.md