Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: SUSE rancher 2.6.14, 2.7.10, 2.8.2 Clear all filters
TI-2023-15495 CVE-2023-32194 · GHSA-c85r-fwc7-45vc

Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'

Priority MEDIUM 40

A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matter the API group, the subject will receive * permissions for core namespaces.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00418 Published 2024-10-16 Fixed in 2.6.14, 2.7.10 +1 CWE-269
TI-2023-08825 CVE-2023-22649 · GHSA-xfj7-qf8w-2gcr

Rancher 'Audit Log' leaks sensitive information

Priority MEDIUM 42

A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs.

CVSS 4.0HIGH 8.4 Network High privileges User interaction EPSS 0.02039 Published 2024-10-16 Fixed in 2.6.14, 2.7.10 +1 CWE-532