CVE-2022-0270

Improper header sanitization in bored-agent causes escalation of privilege PUBLISHED

Description (CNA)

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups.

Vendor / product	Versions
Mirantis / bored-agent	affected 0.6 before 0.6.1

CWE-284

CVE

No English description supplied.