Improper Access Control

github.com/rancher/rancher is vulnerable to Improper Access Control. The vulnerability is due to improper cleanup of roleBindings associated with a user or group when they are removed from a project, allowing former members to continue creating, updating, reading, and deleting namespaces in that project. Attackers can exploit this by manipulating namespace resources, even though they cannot access the resources within the namespaces such as pods and services.