GitHub Advisoryadvisory · Go

GHSA-gc62-j469-9gjm Rancher Privilege Escalation Vulnerability

HIGH Published 2022-05-24 Modified 2023-08-01 Official page ↗
Aliases
CVE-2019-12274
Ecosystem
Go
Packages
github.com/rancher/rancher
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-668
Reviewed
2023-08-01

Affected packages

• Go github.com/rancher/rancher: >= 2.0.0, < 2.2.4 → fixed in 2.2.4 • Go github.com/rancher/rancher: < 1.6.27 → fixed in 1.6.27

Description

In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver options intentionally allow posting certain data to the cloud. The problem is that a user could choose to post a sensitive file such as /root/.kube/config or /var/lib/rancher/management-state/cred/kubeconfig-system.yaml.

Related

Alias · CVE (1)

  • CVE-2019-12274 In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane… vulnerability

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References