Description
When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | rke | 1.4.18 – < 1.4.19, 1.5.9 – < 1.5.10 | 1.4.19 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rke | >= 1.4.18, < 1.4.19 | 1.4.19 | GHSA-6gr4-52w6-vmqx |
| Go | github.com/rancher/rke | >= 1.5.9, < 1.5.10 | 1.5.10 | GHSA-6gr4-52w6-vmqx |
| Go | github.com/rancher/rke | >= 1.4.18, < 1.4.19 · >= 1.5.9, < 1.5.10 | 1.4.19, 1.5.10 | GO-2024-2930 |
Advisories 1
- WID-SEC-2024-1397 Rancher: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 17, 2024