CVE-2022-21953

Summary

A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.

Affected Software

Weaknesses

• CWE-862: CWE-862: Missing Authorization

ADP Enrichment

CVE Program Container

Additional References

• https://bugzilla.suse.com/show_bug.cgi?id=1199731

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://bugzilla.suse.com/show_bug.cgi?id=1199731

• ←Previous
• Next→