CVE-2021-25318

🗓️ 15 Jul 2021 08:55:15Reported by suseType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 51 Views

Incorrect Permission Assignment in Rancher prior to 2.5.9 & 2.4.1

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-25318	15 Jul 202112:25	–	circl
CNNVD	Rancher Labs Rancher 授权问题漏洞	15 Jul 202100:00	–	cnnvd
CNVD	Rancher Labs Rancher Licensing Issue Vulnerability	19 Jul 202100:00	–	cnvd
Cvelist	CVE-2021-25318 rancher: API group not properly specified when creating Kubernetes RBAC resources	15 Jul 202108:55	–	cvelist
EUVD	EUVD-2024-1195	3 Oct 202520:07	–	euvd
Github Security Blog	Rancher does not properly specify ApiGroup when creating Kubernetes RBAC resources	24 Apr 202421:02	–	github
NVD	CVE-2021-25318	15 Jul 202109:15	–	nvd
OSV	GHSA-F9XF-JQ4J-VQW4 Rancher does not properly specify ApiGroup when creating Kubernetes RBAC resources	24 Apr 202421:02	–	osv
OSV	GO-2024-2768 Rancher does not properly specify ApiGroup when creating Kubernetes RBAC resources in github.com/rancher/rancher	10 Jun 202416:39	–	osv
Prion	Design/Logic Flaw	15 Jul 202109:15	–	prion

NVD

Node

rancher rancherRange<2.4.16

rancher rancherRange2.5.0–2.5.9

[
  {
    "product": "Rancher",
    "vendor": "Rancher",
    "versions": [
      {
        "lessThan": "2.5.9",
        "status": "affected",
        "version": "Rancher",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Rancher",
    "vendor": "Rancher",
    "versions": [
      {
        "lessThan": "2.4.16",
        "status": "affected",
        "version": "Rancher",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi

21 Nov 2024 05:54Current

8.6High risk

Vulners AI Score8.6

CVSS 26.5

CVSS 3.18.8

EPSS0.0012

CWE-732