Vulnerability · Published Jan 10, 2022 · Assigned by Mirantis
CVE-2021-44458Lack of websocket authentication in Lens causes remote code execution when visiting a malicious website
High 8.3
In plain English
A high-severity improper authentication in Lens from Mirantis. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.4%top 61.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website could make websocket connections from the victim's browser to Lens and so operate the local terminal feature. This would allow the attacker to execute arbitrary commands as the Lens user.
Affected products (as reported)
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
References
- https://github.com/Mirantis/security/blob/main/advisories/0001.md x_refsource_MISC