PT-2022-13085 · Unknown · Bored-Agent

Name of the Vulnerable Software and Affected Versions: bored-agent versions prior to 0.6.1 Description: The issue arises from the failure to sanitize incoming Kubernetes impersonation headers, allowing a user to override the assigned user name and groups. Recommendations: For versions prior to...

CVE-2021-31999

A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16...