Improper Authentication

github.com/projectcapsule/capsule-proxy and github.com/clastix/capsule-proxy are vulnerable to Improper Authentication. The vulnerability is caused by a missing check if the user is authenticated based on the TokenReview result in capsule-proxy capsule operator project. An attacker can bypass the token review mechanism in all the clusters running with the anonymous-auth Kubernetes API Server setting disabled (set to false), interacting with the upper Kubernetes API Server leading to Privilege Escalation.