Improper Authentication in Capsule Proxy
ImpactUsing a malicious `Connection` header, an attacker with a proper authentication mechanism could start a privilege escalation towards the Kubernetes API Server, being able to exploit the `cluster-admin` Role bound to `capsule-proxy`.PatchesPatch has been merged in the v0.2.1 release.WorkaroundsUpgrading is mandatory.