CVE-2021-31999 Rancher: Privilege escalation vulnerability via malicious Connection header

A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16...

CVE-2021-31999

CVE-2021-31999 describes a Privilege Escalation in Rancher where an attacker can forge Impersonate-User/Impersonate-Group headers to act as other cluster users. Affected: Rancher versions before 2.5.9 and before 2.4.16. Root cause: reliance on untrusted inputs in a security decision. Impact: unau...