Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-25320
HistoryJul 15, 2021 - 9:15 a.m.

Improper access control

2021-07-1509:15:00
PRIOn knowledge base
www.prio-n.com
3

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to 2.5.9; Rancher versions prior to 2.4.16.

CPENameOperatorVersion
rancherge2.5.0
rancherlt2.5.9
rancherlt2.4.16

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

Related for PRION:CVE-2021-25320