Description
a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. This issue affects: SUSE Rancher Rancher versions prior to 2.4.18; Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Rancher | Rancher – < 2.4.18, Rancher – < 2.5.12, Rancher – < 2.6.3 | 2.4.18 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | < 2.4.18 | 2.4.18 | GHSA-28g7-896h-695v |
| Go | github.com/rancher/rancher | >= 2.5.0, < 2.5.12 | 2.5.12 | GHSA-28g7-896h-695v |
| Go | github.com/rancher/rancher | >= 2.6.0, < 2.6.3 | 2.6.3 | GHSA-28g7-896h-695v |
| Go | github.com/rancher/rancher | all versions | — | GO-2024-2760 |