GHSA-JGFP-53C3-624W vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver, ip-masq-agent, kubernetes-csi-driver-nfs, cluster-autoscaler, yunikorn-k8shim, rancher-webhook, spark-operator, emissary, kapp, local-static-provisioner, vcluster, rancher-fleet, kubernetes-csi-driver-hostpath,...

SUSE CVE-2023-22648

A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI. This would cause the users to retain their previous permissions in Rancher, even if they change groups on Azure AD, for example...

Rancher 安全漏洞

Rancher Labs Rancher is a suite of open source, enterprise-grade container management platforms from US-based Rancher Labs. A security vulnerability exists in versions prior to Rancher 2.7.3, which stems from the presence of a mismanagement of privileges vulnerability that allows elevation of...

PT-2023-1494 · Suse · Suse Rancher

Name of the Vulnerable Software and Affected Versions: SUSE Rancher versions prior to 2.5.17 SUSE Rancher versions prior to 2.6.10 SUSE Rancher versions prior to 2.7.1 Description: A code execution issue exists due to improper neutralization of special elements used in an OS command. This issue c...