75 matches found
Rancher API Server Cross-site Scripting Vulnerability
Impact A vulnerability has been identified in which unauthenticated cross-site scripting XSS in the API Server's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely. The attack vector was identifi...
GHSA-C85R-FWC7-45VC Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'
Impact A vulnerability has been identified when granting a create or global role for a resource type of "namespaces"; no matter the API group, the subject will receive permissions for core namespaces. This can lead to someone being capable of accessing, creating, updating, or deleting a namespace...
.NET 7.0 Update - November 14, 2023 (KB5032884)
None None...
.NET 6.0 Update - November 14, 2023 (KB5032883)
None None...
.NET 7.0 Update - October 24, 2023 (KB5032875)
None None...
.NET 6.0 Update - October 24, 2023 (KB5032874)
None None...
CVE-2023-20586 Radeon™ Software Crimson ReLive Edition
A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. Radeon™ Software Crimson ReLive Edition falls outside of the security support lifecycle and AMD does not plan to release any mitigations...
.NET 6.0 Update - August 8, 2023 (KB5029688)
None None...
PT-2023-17469 · Amd · Radeon Software Crimson Relive Edition
Name of the Vulnerable Software and Affected Versions: Radeon Software Crimson ReLive Edition affected versions not specified Description: A potential issue was reported in Radeon Software Crimson ReLive Edition that may allow escalation of privilege. This software falls outside of the security...
.NET 6.0 Update - July 11, 2023 (KB5028705)
None None...
.NET 6.0 Update - June 13, 2023 (KB5027797)
None None...
GHSA-8VHC-HWHC-CPJ4 Rancher users retain access after moving namespaces into projects they don't have access to
Impact A vulnerability was identified in which users with update privileges on a namespace, can move that namespace into a project they don't have access to. After the namespace transfer is completed, their previous permissions are still preserved, which enables them to gain access to...
.NET 7.0 Update - April 11, 2023 (KB5025916)
None None...
.NET 6.0 Update - April 11, 2023 (KB5025915)
None None...
.NET 6.0 Update - Mar 14, 2023 (KB5024670)
None None...
.NET 7.0 Update - February 14, 2023 (KB5023286)
None None...
GHSA-CQ4P-VP5Q-4522 Plaintext storage of sensitive data in Rancher API and cluster.management.cattle.io objects
Impact This issue affects Rancher versions from 2.5.0 up to and including 2.5.16, from 2.6.0 up to and including 2.6.9 and 2.7.0. It was discovered that the security advisory CVE-2021-36782 GHSA-g7j7-h4q8-8w2f, previously released by Rancher, missed addressing some sensitive fields, secret tokens...
.NET 6.0 Update - January 10, 2023 (KB5022546)
None None...