Suse

Rancher

54 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2019-12274

  • EPSS 0.19%
  • Veröffentlicht 06.06.2019 16:29:01
  • Zuletzt bearbeitet 21.11.2024 04:22:32

In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver options intentionally allow posting certain data to the cloud. The problem is that a user coul...

8.1

CVE-2019-6287

  • EPSS 0.17%
  • Veröffentlicht 10.04.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:46:22

In Rancher 2.0.0 through 2.1.5, project members have continued access to create, update, read, and delete namespaces in a project after they have been removed from it.

9

CVE-2018-20321

  • EPSS 0.44%
  • Veröffentlicht 10.04.2019 14:29:00
  • Zuletzt bearbeitet 21.11.2024 04:01:13

An issue was discovered in Rancher 2 through 2.1.5. Any project member with access to the default namespace can mount the netes-default service account in a pod, and then use that pod to execute administrative privileged commands against the k8s clus...

8.8

CVE-2017-7297

  • EPSS 1.03%
  • Veröffentlicht 29.03.2017 00:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3, and rancher/server:v1.5.3.