CVE-2022-43759 — Rancher: Privilege escalation via promoted roles

CVE-2022-43759

Rancher: Privilege escalation via promoted roles PUBLISHED

Description (CNA)

A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to escalate permissions for any -promoted resource in any cluster. This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10.

Affected (CNA)

Vendor / product	Versions
SUSE / Rancher	affected Rancher before 2.5.17
SUSE / Rancher	affected Rancher before 2.6.10

CWE

CWE-269

References

https://bugzilla.suse.com/show_bug.cgi?id=1205293

ADP enrichment

CVE

No English description supplied.

https://bugzilla.suse.com/show_bug.cgi?id=1205293

CISA-ADP

No English description supplied.

No references supplied.