Browse all 5 CVE security advisories affecting Mirantis. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Mirantis provides enterprise-grade containerization and cloud-native solutions, primarily focusing on Kubernetes deployment and management. Historically, their products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from misconfigurations or insecure default settings. While no major public security incidents have been widely documented, the company maintains a moderate CVE count with five currently active records. Their security posture emphasizes regular patching and adherence to security best practices, though organizations should implement additional hardening measures when deploying Mirantis solutions in high-risk environments.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2022-0484 | Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs — Mirantis Container Cloud Lens ExtensionCWE-20 | 8.8 | High | 2022-02-04 |
| CVE-2022-0270 | Improper header sanitization in bored-agent causes escalation of privilege — bored-agentCWE-284 | 8.8 | High | 2022-01-25 |
| CVE-2021-23154 | Command injection in Lens causes arbitrary shell command execution when malicious custom helm chart configuration provided — LensCWE-94 | 6.3 | Medium | 2022-01-10 |
| CVE-2021-23218 | Memory Leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a Denial of Service — Mirantis Container RuntimeCWE-401 | 5.3 | Medium | 2022-01-10 |
| CVE-2021-44458 | Lack of websocket authentication in Lens causes remote code execution when visiting a malicious website — LensCWE-287 | 8.3 | High | 2022-01-10 |
This page lists every published CVE security advisory associated with Mirantis. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.