GO-2023-1973

vendorUSosv

Rancher Access Control Vulnerability in github.com/rancher/rancher

view advisory published 2024-08-20Licence: per source

Rancher Access Control Vulnerability in github.com/rancher/rancher

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2017-7297UShigh8.8—
Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan