9.9
Critique
CVE-2021-25320 A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by…
Description
A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to 2.5.9; Rancher versions prior to 2.4.16.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rancher 2.4 | premières → < 2.4.16 | 2.4.16 |
Autres CVE de Rancher
Les 7 CVE de Rancher →
CVE-2026-55997
Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster
8.8
Élevée
CVE-2023-32196
A vulnerability has been identified whereby privilege escalation checks are not properly enforced for…
6.6
Moyenne
CVE-2023-32194
A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no…
7.2
Élevée
CVE-2023-22649
A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs
8.4
Élevée