Suse Rancher Vulnerabilities
Suse Rancher vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Rancher vSphere Vulnerability: Plaintext Storage of CPI/CSI Credentials
CVE-2022-45157SuseRancher9.1CRITICALKubernetes RKE1 Cluster Vulnerability: Plaintext Secret Values Exposed During Reconciliation
CVE-2024-22032SuseRancher6.5MEDIUMRancher Vulnerability: Narrow MITM Exploit via Domain Control
CVE-2024-22030SuseRancher8HIGHPrivilege Escalation Vulnerability in RoleTemplateObjects
CVE-2023-32196SuseRancher6.6MEDIUMNaming Privilege Abuse Vulnerability
CVE-2023-32194SuseRancher7.2HIGHRancher Vulnerability: Unauthorized Access via Deleted Users
CVE-2023-22650SuseRancher8.8HIGHSensitive Data at Risk of Leakage in Rancher Audit Logs
CVE-2023-22649SuseRancher6.5MEDIUMImproper Privilege Management in SUSE Rancher Affects Azure AD User Permissions
CVE-2023-22648SuseRancher8.8HIGHImproper Privilege Management in SUSE Rancher Affects Kubernetes Secrets
CVE-2023-22647SuseRancher8HIGHCross-site Scripting Vulnerability in Rancher by SUSE
CVE-2022-43760SuseRancher8.4HIGHImproper Privilege Management in SUSE Rancher
CVE-2023-22651SUSERancher9.9CRITICALRancher/Wrangler: Denial of service when processing Git credentials
CVE-2022-43756SuseRancher5.9MEDIUMRancher: Non-random authentication token
CVE-2022-43755SuseRancher7.1HIGH[RANCHER] OS command injection in Rancher and Fleet
CVE-2022-31249SuseRancher7.5HIGHRancher: Privilege escalation via promoted roles
CVE-2022-43759SuseRancher7.2HIGHRancher: Command injection in Git package
CVE-2022-43758SuseRancher7.6HIGHRancher: Exposure of sensitive fields
CVE-2022-43757SuseRancher9.9CRITICALAuthenticated user can gain unauthorized shell pod and kubectl access in the local cluster
CVE-2022-21953SuseRancher7.4HIGHRancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)
CVE-2022-31247SuseRancher9.1CRITICALRancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object
CVE-2021-36782SuseRancher👾🟡9.9CRITICALRancher: Failure to properly sanitize credentials in cluster template answers
CVE-2021-36783SuseRancher9.9CRITICALRancher: Weave CNI password is not set if RKE template is used with CNI value overridden
CVE-2022-21951SuseRancher6.8MEDIUMExposure of repository credentials to external third-party sources
CVE-2021-36778SuseRancher7.3HIGHWrite access to the Catalog for any user when restricted-admin role is enabled
CVE-2021-4200SuseRancher5.4MEDIUMPrivilege escalation for users with create/update permissions in Global Roles
CVE-2021-36784SuseRancher7.2HIGH