Description
A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Rancher | Rancher – < 2.5.13, Rancher – < 2.6.4 | 2.5.13 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | >= 2.6.0, < 2.6.4 | 2.6.4 | GHSA-jwvr-vv7p-gpwq |
| Go | github.com/rancher/rancher | >= 2.5.0, < 2.5.13 | 2.5.13 | GHSA-jwvr-vv7p-gpwq |