Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: SUSE Rancher, Rancher 2.5.16, 2.6.7 Clear all filters
TI-2022-13280 CVE-2022-31247 · GHSA-6x34-89p7-95wg

Rancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)

Priority MEDIUM 41

An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project role template bindings (such as cluster-owner, manage cluster members,…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01 Published 2022-09-07 Fixed in 2.6.7, 2.5.16 CWE-285
TI-2021-14903 CVE-2021-36782 · GHSA-g7j7-h4q8-8w2f

Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object

Priority MEDIUM 49

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plainte…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04171 Published 2022-09-07 Fixed in 2.5.16, 2.6.7 CWE-312