Improper Privilege Management in SUSE Rancher

CVE-2023-22651

Summary

An improper privilege management issue has been identified in SUSE Rancher, which poses a risk of privilege escalation. This vulnerability stems from a flaw in the update logic of Rancher's admission Webhook, which could result in misconfiguration. The admission Webhook is crucial as it enforces validation rules and security checks for resources entering the Kubernetes cluster. Only users upgrading from versions 2.6.x or 2.7.x to 2.7.2 are potentially impacted; fresh installations of 2.7.2 are not affected.

References