Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: SUSE Rancher < 2.6.13, < 2.7.4 Clear all filters
TI-2022-21494 CVE-2022-43760 · GHSA-46v3-ggjg-qq3x

Cross-site scripting in SUSE Rancher

Priority MEDIUM 40

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject code that is executed within another user's…

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00714 Published 2023-06-01 Fixed in < 2.6.13, < 2.7.4 +2 CWE-79
TI-2023-08823 CVE-2023-22647 · GHSA-p976-h52c-26p6

Improper privilege management in SUSE Rancher

Priority MEDIUM 44

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted, b…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00715 Published 2023-06-01 Fixed in < 2.6.13, < 2.7.4 +2 CWE-267
TI-2023-08824 CVE-2023-22648 · GHSA-vf6j-6739-78m8

Improper privilege management in SUSE Rancher

Priority LOW 38

A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00454 Published 2023-06-01 Fixed in < 2.6.13, < 2.7.4 +2 CWE-271