Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-4200

Write access to the Catalog for any user when restricted-admin role is enabled

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Rancher

  • Rancher to < 2.5.13affected

SUSE Rancher

  • Rancher to < 2.6.4affected

References