CVE-2021-25320

CVE-2021-25320 is an improper access control vulnerability in Rancher. Multiple connected sources specify that Rancher versions prior to 2.5.9 and prior to 2.4.16 are affected, allowing cluster users to trigger cloud-provider requests by crafting requests with a cloud-credential ID, with Rancher ...