TI-2023-08827 Aliases CVE-2023-22651 GHSA-6m9f-pj6w-w87g

Improper privilege management in SUSE Rancher

MEDIUM 44CWE-269Published 2023-05-04 · Updated 2025-01-29

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Privilege escalation
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-269.

Summary

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into the Kubernetes cluster. The issue only affects users that upgrade from 2.6.x or 2.7.x to 2.7.2. Users that did a fresh install of 2.7.2 (and did not follow an upgrade path) are not affected.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00779 56th percentileScored 2026-11-07

Fix Fixed Rancher (SUSE): 2.7.3github.com/rancher/rancher (Go): 2.7.3, 0.0.0-20230424183121-6d9a175954c6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SUSE	Rancher	2.6.0 – 2.7.2	2.7.3	Patch available	CNA
—	github.com/rancher/rancher (Go)	2.7.2 to before 2.7.3	2.7.3	Patch available	GHSA-6m9f-pj6w-w87g
—	github.com/rancher/rancher (Go)	0.0.0-20220922131902-ec6d6d3a7616 to before 0.0.0-20230424183121-6d9a175954c6	0.0.0-20230424183121-6d9a175954c6	Patch available	GHSA-6m9f-pj6w-w87g

Rancher VendorSUSE Affected 2.6.0 – 2.7.2 Fixed in 2.7.3 Patch available CNA
github.com/rancher/rancher (Go) Vendor— Affected 2.7.2 to before 2.7.3 Fixed in 2.7.3 Patch available GHSA-6m9f-pj6w-w87g
github.com/rancher/rancher (Go) Vendor— Affected 0.0.0-20220922131902-ec6d6d3a7616 to before 0.0.0-20230424183121-6d9a175954c6 Fixed in 0.0.0-20230424183121-6d9a175954c6 Patch available GHSA-6m9f-pj6w-w87g

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:suse:rancher::::::::	2.6.0 – 2.7.2	Vulnerable	SUSE

cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:* Versions 2.6.0 – 2.7.2 Vulnerable ·SUSE

Remediation

Fix · CNA Rancher (SUSE) Fixed in 2.7.3
Fix · GHSA-6m9f-pj6w-w87g github.com/rancher/rancher (Go) Fixed in 2.7.3 Advisory →
Fix · GHSA-6m9f-pj6w-w87g github.com/rancher/rancher (Go) Fixed in 0.0.0-20230424183121-6d9a175954c6 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2023-22651
2026-10-03 Alias added: GHSA-6m9f-pj6w-w87g

References

Advisory 3

Other 2

TI-2021-14903 Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object CVSS 3.1CRITICAL 9.9
TI-2022-21489 Rancher: Non-random authentication token CVSS 3.1CRITICAL 9.8
TI-2019-08380 An issue was discovered that affects the following versions of Rancher: v2.0.0 through… CVSS 3.0CRITICAL 9.8
TI-2023-08823 Improper privilege management in SUSE Rancher CVSS 3.1CRITICAL 9.9
TI-2022-21491 Rancher: Exposure of sensitive fields CVSS 3.1CRITICAL 9.9
TI-2021-14904 Rancher: Failure to properly sanitize credentials in cluster template answers CVSS 3.1CRITICAL 9.9

See all 35 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences