CVE-2021-25320

CRITICAL

9.9

CVSS Severity Score

EPSS Score0.0450%

EPSS Percentile28.09th

Published2021年7月15日

Last Modified2024年11月21日

Vulnerability Description

A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to 2.5.9; Rancher versions prior to 2.4.16.

Affected Platforms (CPE)

📦

Rancher

< 2.4.16

📦

Rancher

>= 2.5.0 and < 2.5.9

References & Advisories

🔗 https://bugzilla.suse.com/show_bug.cgi?id=1185514

Vulnerability Description

Affected Platforms (CPE)

Rancher

Rancher

References & Advisories

相關漏洞威脅