PatchTheCVErancher vulnerabilities
Recent CVEs affecting rancher products. 5 tracked.
rancher has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-04-04. Highest priority: CVE-2021-25320 (score 49/100).
- CVE-2021-36776 HIGH 8.8 UPGRADE A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users
- CVE-2021-36775 HIGH 8.8 UPGRADE a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been
- CVE-2021-31999 HIGH 8.8 UPGRADE A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to
- CVE-2021-25320 CRITICAL 9.9 UPGRADE A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud provi
- CVE-2021-25318 HIGH 8.8 UPGRADE A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster t
FAQ
How do I fix rancher vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rancher being exploited right now?
None of the tracked rancher CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rancher CVE should I patch first?
CVE-2021-25320 currently ranks highest (49/100): A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud provi.