CVE-2023-32197

Rancher's External RoleTemplates can lead to privilege escalation

CVSS 7.5 HIGHEPSS 0.5%CWE-269

A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5.

CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

SUSE · rancher

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32197 https://github.com/rancher/rancher/security/advisories/GHSA-64jq-m7rq-768h