Description
A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to escalate permissions for any -promoted resource in any cluster. This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Rancher | Rancher – < 2.5.17, Rancher – < 2.6.10 | 2.5.17 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | >= 2.5.0, < 2.5.17 | 2.5.17 | GHSA-7m72-mh5r-6j3r |
| Go | github.com/rancher/rancher | >= 2.6.0, < 2.6.10 | 2.6.10 | GHSA-7m72-mh5r-6j3r |
Advisories 1
- WID-SEC-2023-0197 Rancher: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 24, 2023