Description
A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Rancher | Rancher – < 2.5.13, Rancher – < 2.6.4 | 2.5.13 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | >= 2.6.0, < 2.6.4 | 2.6.4 | GHSA-hx8w-ghh8-r4xf |
| Go | github.com/rancher/rancher | >= 2.5.0, < 2.5.13 | 2.5.13 | GHSA-hx8w-ghh8-r4xf |