CVE-2023-32194
16.10.2024, 13:15
A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matter the API group, the subject will receive * permissions for core namespaces. This can lead to someone being capable of accessing, creating, updating, or deleting a namespace in the project.Enginsight
Vendor | Product | Version |
---|---|---|
rancher | rancher | 2.6.14 < 𝑥 < 2.6.14 |
rancher | rancher | 2.7.10 < 𝑥 < 2.7.10 |
rancher | rancher | 2.8.2 < 𝑥 < 2.8.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration