CVE-2021-25320
15.07.2021, 09:15
A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to 2.5.9; Rancher versions prior to 2.4.16.Enginsight
| Vendor | Product | Version |
|---|---|---|
| rancher | rancher | 𝑥 < 2.4.16 |
| rancher | rancher | 2.5.0 ≤ 𝑥 < 2.5.9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration