CyberRota Analysis
AI-GeneratedA vulnerability in the openshift/oauth-proxy allows unauthenticated attackers to inject forged identity headers on paths configured to bypass authentication. This can lead to unauthorized access to sensitive resources in upstream applications, as the proxy forwards client-supplied headers without proper validation. Organizations using this proxy should prioritize addressing this issue to mitigate potential security risks.
Original NVD Description
A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication (skip-auth-regex), the proxy forwards client-supplied identity headers (X-Forwarded-User, X-Forwarded-Email, X-Forwarded-Access-Token) to the upstream application without stripping them. An unauthenticated attacker can inject forged identity headers on whitelisted paths.