Mirantis
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Lens | 2 | – | Jan 10, 2022 |
| bored-agent | 1 | – | Jan 25, 2022 |
| Mirantis Container Cloud Lens Extension | 1 | – | Feb 4, 2022 |
| Mirantis Container Runtime | 1 | – | Jan 10, 2022 |
Exploited and recent CVEs
- CVE-2022-0484 Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs 1.0%
- CVE-2022-0270 Improper header sanitization in bored-agent causes escalation of privilege 0.9%
- CVE-2021-23154 Command injection in Lens causes arbitrary shell command execution when malicious custom helm chart configuration provided 0.6%
- CVE-2021-23218 Memory Leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a Denial of Service 0.9%
- CVE-2021-44458 Lack of websocket authentication in Lens causes remote code execution when visiting a malicious website 0.4%