Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-36775

Deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings

Description

a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. This issue affects: SUSE Rancher Rancher versions prior to 2.4.18; Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Rancher

  • Rancher to < 2.4.18affected

SUSE Rancher

  • Rancher to < 2.5.12affected

SUSE Rancher

  • Rancher to < 2.6.3affected

References