Lucene search
Veracode Vulnerability DatabaseVERACODE:34431HistoryFeb 28, 2022 - 7:59 a.m.
Privilege Escalation
2022-02-2807:59:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.003 Low
EPSS
Percentile
69.0%
github.com/clastix/capsule-proxy is vulnerable to privilege escalation. The vulnerability exists due to the malicious Connection header in the Kubernetes API Server allowing an unauthorized user to gain cluster-admin privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/clastix/capsule-proxy | le | v0.2.0 | |
| github.com/clastix/capsule-proxy | le | v0.2.0 |
Related
cve
cve
CVE-2022-23652
2022-02-22 20:15:07
cvelist
cvelist
CVE-2022-23652 Privilege escalation using hop-by-hop Connection header
2022-02-22 19:55:11
osv
osv
CVE-2022-23652
2022-02-22 20:15:07
Improper Authentication in Capsule Proxy
2022-02-23 21:17:25
prion
prion
Design/Logic Flaw
2022-02-22 20:15:00
nvd
nvd
CVE-2022-23652
2022-02-22 20:15:07
github
github
Improper Authentication in Capsule Proxy
2022-02-23 21:17:25