Description
A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to. This issue affects: Rancher versions prior to 2.5.9 ; Rancher versions prior to 2.4.16.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rancher | Rancher | Rancher – < 2.5.9, Rancher – < 2.4.16 | 2.5.9 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | >= 2.0.0, < 2.4.16 | 2.4.16 | GHSA-f9xf-jq4j-vqw4 |
| Go | github.com/rancher/rancher | >= 2.5.0, < 2.5.9 | 2.5.9 | GHSA-f9xf-jq4j-vqw4 |
| Go | github.com/rancher/rancher | >= 2.0.0+incompatible | — | GO-2024-2768 |