Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-23391

Rancher: Restricted Administrator can change Administrator's passwords

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE rancher

Default version status: unaffected

  • 2.8.0 to < 2.8.14affected
  • 2.9.0 to < 2.9.8affected
  • 2.10.0 to < 2.10.4affected

References