Beveiligingsadvies

CVE-2023-32199

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-29 14:54:04
Laatst bijgewerkt 2025-10-29 15:26:02
Toegewezen door suse
CVSS-score 4.3
Status PUBLISHED

Beschrijving

A vulnerability has been identified within Rancher Manager, where after removing a custom GlobalRole that gives administrative access or the corresponding binding, the user still retains access to clusters. This only affects custom Global Roles that have a * on * in * rule for resources or have a * on * rule for non-resource URLs