CVE-2022-31249highCWE-78

CVE-2022-31249: high-severity vulnerability in SUSE Rancher

[RANCHER] OS command injection in Rancher and Fleet

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 3.8%
exploitation probability
3.8%top 10% of all CVEs
observed exploitation
nono source reports it
In short

Rancher's Wrangler component fails to properly validate user input, allowing attackers to inject malicious operating system commands. These injected commands execute with the privileges of the Rancher service, potentially giving attackers full control of the underlying host.

Technical detail

OS command injection vulnerability in Wrangler allows unauthenticated remote attackers to execute arbitrary OS commands on the host system via specially crafted input passed to command processing functions. The vulnerability stems from improper sanitization of user-supplied data before passing it to OS command execution APIs, affecting versions 0.7.3, 0.8.4, and 1.0.0 and prior.

Summary generated and translated by AI from the official description.
A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler of SUSE Rancher allows remote attackers to inject commands in the underlying host via crafted commands passed to Wrangler. This issue affects: SUSE Rancher wrangler version 0.7.3 and prior versions; wrangler version 0.8.4 and prior versions; wrangler version 1.0.0 and prior versions.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
SUSE · Rancher
Related CVEs — SUSE Rancher

In the same product, most dangerous first.

CVE-2021-36782CRITICALRancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io objectEPSS 4.2%CVE-2022-43755HIGHRancher: Non-random authentication tokenEPSS 1.7%CVE-2021-25313HIGHRancher: XSS on /v3/cluster/EPSS 1.5%CVE-2026-44939CRITICALCommand injection through unsanitized YAML parameter in RancherEPSS 1.3%CVE-2021-36776HIGHSteve API proxy impersonationEPSS 1.1%CVE-2022-43758HIGHRancher: Command injection in Git packageEPSS 1.0%
References
https://bugzilla.suse.com/show_bug.cgi?id=1200299