Beveiligingsadvies

CVE-2022-31247

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-09-07 08:20:18

Laatst bijgewerkt 2024-09-16 19:52:12

Toegewezen door suse

CVSS-score 9.1

Status PUBLISHED

Beschrijving

An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project role template bindings (such as cluster-owner, manage cluster members, project-owner and manage project members) to gain owner permission in another project in the same cluster or in another project on a different downstream cluster. This issue affects: SUSE Rancher Rancher versions prior to 2.6.7; Rancher versions prior to 2.5.16.

← Alle CVE's bekijken Bekijk op cve.org ↗