8.8
High
CVE-2021-31999 A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as…
Description
A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rancher 2.5 | earliest → < 2.5.9 | 2.5.9 |
| SUSE Linux Enterprise Server 15 2.4 | earliest → < 2.4.16 | 2.4.16 |
Other CVEs of Rancher
The 7 CVEs of Rancher →
CVE-2026-55997
Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster
8.8
High
CVE-2023-32196
A vulnerability has been identified whereby privilege escalation checks are not properly enforced for…
6.6
Medium
CVE-2023-32194
A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no…
7.2
High
CVE-2023-22649
A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs
8.4
High