An Improper Authorization... CVE-2022-31247

- AV AC AU C I A
发布: 2022-09-07
修订: 2024-11-21

An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project role template bindings (such as cluster-owner, manage cluster members, project-owner and manage project members) to gain owner permission in another project in the same cluster or in another project on a different downstream cluster. This issue affects: SUSE Rancher Rancher versions prior to 2.6.7; Rancher versions prior to 2.5.16.

0%
暂无可用Exp或PoC
当前有2条受影响产品信息