Lucene search
GoogleOSV:CVE-2021-25320HistoryJul 15, 2021 - 9:15 a.m.
CVE-2021-25320
2021-07-1509:15:08
Google
osv.dev
2
A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to 2.5.9; Rancher versions prior to 2.4.16.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rancher | eq | 2.5.2-rc7 | |
| rancher | eq | 2.5.9-rc10 | |
| rancher | eq | 2.5.8-rc14 | |
| rancher | eq | 2.5.8-rc19 | |
| rancher | eq | 2.5.9-rc9 | |
| rancher | eq | 2.5.8-rc8 | |
| rancher | eq | 2.5.4-rc2 | |
| rancher | eq | 2.5.4-rc9 | |
| rancher | eq | 2.5.9-rc14 | |
| rancher | eq | 2.5.9-rc7 |
Related
cnvd
cnvd
Rancher Labs Rancher Access Control Error Vulnerability
2021-07-16 00:00:00
nvd
nvd
CVE-2021-25320
2021-07-15 09:15:08
cve
cve
CVE-2021-25320
2021-07-15 09:15:08
cvelist
cvelist
prion
prion
Improper access control
2021-07-15 09:15:00