Permission Bypass

2024-02-1105:22:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

rancher

software

vulnerability

misconfiguration

rbac rules

excessive permissions

namespace

6.7 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

github.com/rancher/rancher is vulnerable to Permission Bypass. The vulnerability due to a misconfiguration in RBAC rules, which grants excessive permissions for the create or * global role for the namespaces resource type. This flaw allows an attacker to access, create, update, or delete a namespace in the project.