CVE-2021-31999
8.8HIGHA Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group
Veröffentlicht: 7/15/2021Aktualisiert: 11/21/2024
Beschreibung
A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16.
KI-AnalyseKI-gestützt
Betroffene Produkte
rancherrancher
rancherrancher
Referenzen
- https://bugzilla.suse.com/show_bug.cgi?id=1187084Issue TrackingRelease NotesThird Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1187084Issue TrackingRelease NotesThird Party Advisory