Non-admin users can escalate to admin rights via configmap

CVE-2023-32191

Summary

A security vulnerability exists within Rancher's RKE where sensitive cluster state information is stored in a configmap named full-cluster-state within the kube-system namespace. This misconfiguration enables non-admin users to gain elevated privileges by exploiting the accessible data. As a result, unauthorized users could potentially alter critical configurations or gain administrative control over the Kubernetes cluster. Securing access to the cluster's configmap is essential to ensure that only authorized personnel can interact with these sensitive settings and to safeguard the overall integrity of the RKE deployment.

References