Security Advisory

CVE-2025-23391

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-11 10:38:43

Last updated 2026-02-26 18:28:27

Assigner suse

CVSS score 9.1

State PUBLISHED

Description

A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4.

← Browse all CVEs View on cve.org ↗