CVE-2021-4200

CVE-2021-4200 in SUSE Rancher is an improper privilege management issue that lets any user with catalog access write to CatalogTemplates and CatalogTemplateVersions when the restricted-admin role is enabled. Affected Rancher versions are prior to 2.5.13 and prior to 2.6.4; patched releases are 2....

CVE-2021-4200 Write access to the Catalog for any user when restricted-admin role is enabled

A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4...