Skip to content
OpenAdvisories
High WID-SEC-2024-1397 4 CVEs

Rancher: Mehrere Schwachstellen

Published Jun 17, 2024 · Updated Jun 17, 2024 · de-DE

Vendor: rancher Product: rancher Platform: Linux

Summary

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Dateien zu manipulieren, seine Privilegien zu erweitern oder vertrauliche Informationen offenzulegen.

Product

Rancher ist ein Werkzeug für die Verwaltung von Kubernetes-Container basierten Umgebungen.

Vulnerabilities 4

  • Critical 9.9
    CVE-2023-32191

    rke's credentials are stored in the RKE1 Cluster state ConfigMap

    When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin.

    SUSE rke github.com/rancher/rke Go
  • High 8.8
    CVE-2023-22650

    Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider

    A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from the configured authentication provider (AP). This characteristic also applies to disabled or revoked users, Rancher will not reflect these …

    SUSE Rancher github.com/rancher/rancher Go
  • Medium 6.6
    CVE-2023-32196

    Rancher's External RoleTemplates can lead to privilege escalation

    A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobjects when external=true, which in specific scenarios can lead to privilege escalation.

    SUSE Rancher github.com/rancher/rancher Go
  • Medium 6.5
    CVE-2024-22032

    Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec

    A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When reconciling, the Kube API secret values are written in plaintext on the AppliedSpec. Cluster owners, Cluster membe…

    SUSE Rancher github.com/rancher/rancher Go

Revision history

  1. #1

    Initiale Fassung

References