Vulnérabilités connues pour SUSE Rancher
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2024-52280 | A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to… | 7.7 Élevée | 11 avr. 2025 |
| CVE-2024-52282 | A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with… | 6.2 Moyenne | 11 avr. 2025 |
| CVE-2025-23387 | A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users… | 5.3 Moyenne | 11 avr. 2025 |
| CVE-2025-23388 | A Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher:… | 8.2 Élevée | 11 avr. 2025 |
| CVE-2025-23389 | A Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML… | 8.4 Élevée | 11 avr. 2025 |
| CVE-2025-23391 | A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the… | 9.1 Critique | 11 avr. 2025 |
| CVE-2022-45157 | A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI… | 9.1 Critique | 13 nov. 2024 |
| CVE-2024-22032 | A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption… | 6.5 Moyenne | 16 oct. 2024 |
| CVE-2024-22030 | A vulnerability has been identified within Rancher that can be exploited in narrow circumstances through a… | 8.0 Élevée | 16 oct. 2024 |
| CVE-2023-32196 | A vulnerability has been identified whereby privilege escalation checks are not properly enforced for… | 6.6 Moyenne | 16 oct. 2024 |
| CVE-2023-32194 | A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no… | 7.2 Élevée | 16 oct. 2024 |
| CVE-2023-22650 | A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted… | 8.8 Élevée | 16 oct. 2024 |
| CVE-2023-22649 | A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs | 8.4 Élevée | 16 oct. 2024 |
| CVE-2022-43760 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher… | 8.4 Élevée | 1 juin 2023 |
| CVE-2023-22647 | An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing… | 9.9 Critique | 1 juin 2023 |
| CVE-2023-22648 | A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be… | 8.0 Élevée | 1 juin 2023 |
| CVE-2023-22651 | Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation | 9.9 Critique | 4 mai 2023 |
| CVE-2022-43758 | A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SUSE… | 7.6 Élevée | 7 févr. 2023 |
| CVE-2022-43757 | A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain… | 9.9 Critique | 7 févr. 2023 |
| CVE-2022-43756 | A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in… | 5.9 Moyenne | 7 févr. 2023 |
| CVE-2022-43755 | A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to… | 7.1 Élevée | 7 févr. 2023 |
| CVE-2022-43759 | A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to… | 7.2 Élevée | 7 févr. 2023 |
| CVE-2022-31249 | A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler… | 7.5 Élevée | 7 févr. 2023 |
| CVE-2022-21953 | A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod… | 7.4 Élevée | 7 févr. 2023 |
| CVE-2022-31247 | An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role… | 9.1 Critique | 7 sept. 2022 |
Autres produits SUSE
neuvector 14
openSUSE Tumbleweed 13
SUSE Linux Enterprise Server 15 13
SUSE Linux Enterprise Server 12 12
SUSE Linux Enterprise Server for SAP 15 8
libzypp 7
SUSE Linux Enterprise Server 15-LTSS 7
SUSE Manager Server Module 4.3 7
SUSE Linux Enterprise Server for SAP Applications 15 SP6 6
supportutils 5
openSUSE Factory 5
SUSE Linux Enterprise Server for SAP Applications 15 SP5 5