by Kastro
Paper/Archive/CVE-2021-25320

CVE-2021-25320

Rancher Rancher — Rancher: Cloud credentials can be used through proxy API by users without access

EPSS 0.9%CVSS 9.9
critical.is priorityof 100
41
CVSS 9.9 (CNA, NVD agree)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 58.4.584 × 2011.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to 2.5.9; Rancher versions prior to 2.4.16.

Affected

ProductAffectedFixed inSource
RancherRancher – < 2.5.92.5.9CNA
RancherRancher – < 2.4.162.4.16CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
suse (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

refbugzilla.suse.com/show_bug.cgi?id=1185514