CVE-2022-21953

CVSS V2 None CVSS V3 None
Description
A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.
Overview
  • CVE ID
  • CVE-2022-21953
  • Assigner
  • meissner@suse.de
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-07T13:15:09
  • Last Modified Date
  • 2023-02-16T22:23:01
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:* 1 OR 2.5.0 2.5.17
cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:* 1 OR 2.6.0 2.6.10
cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:* 1 OR 2.7.0 2.7.1
References
Reference URL Reference Tags
https://bugzilla.suse.com/show_bug.cgi?id=1199731 Issue Tracking
History
Created Old Value New Value Data Type Notes
2023-04-17 07:19:45 Added to TrackCVE
2023-04-17 07:19:48 Weakness Enumeration new