EUVD-2022-15449

Malicious code in bioql PyPI...

CVE-2022-0270

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups...

Code injection

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups...

CVE-2022-0270

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups...

CVE-2022-0270 Improper header sanitization in bored-agent causes escalation of privilege

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups...

PT-2022-13085 · Unknown · Bored-Agent

Name of the Vulnerable Software and Affected Versions: bored-agent versions prior to 0.6.1 Description: The issue arises from the failure to sanitize incoming Kubernetes impersonation headers, allowing a user to override the assigned user name and groups. Recommendations: For versions prior to...

CVE-2022-0270: Improper Access Control

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups...

CVE-2022-0270

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups...