Vulnerability CVE-2020-10676
Published: 2023-12-12   Modified: 2023-12-14

Description:
In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a different project.

Type:

CWE-863

 (Incorrect Authorization)

Affected software
SUSE -> Rancher 

 References:
https://forums.rancher.com/c/announcements
https://github.com/advisories/GHSA-8vhc-hwhc-cpj4
https://github.com/rancher/rancher/releases/tag/v2.6.13
https://github.com/rancher/rancher/releases/tag/v2.7.4
Copyright 2024, cxsecurity.com

 

Back to Top