Naming Privilege Abuse Vulnerability
CVE-2023-32194
What is CVE-2023-32194?
A significant vulnerability exists in Rancher products that allows users with create or global role permissions for the resource type 'namespaces' to gain excessive privileges. This flaw enables unauthorized access to core namespaces, giving these users the ability to create, update, and delete namespaces within the project. The implications of this vulnerability are critical as it compromises the integrity and security of the Kubernetes environment, allowing for potential data breaches and resource manipulation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
rancher 2.6.0 < 2.6.14
rancher 2.7.0 < 2.7.10
rancher 2.8.0 < 2.8.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved