Rancher kayıtları
rancher üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-284 Improper Access Control3
- CWE-269 Improper Privilege Management2
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
- CWE-807 Reliance on Untrusted Inputs in a Security Decision1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-25320İstismar yok | Rancher: Cloud credentials can be used through proxy API by users without accessrancher · rancher · CWE-284 | Kritik9,9 | — | %0,8 | 15 Tem 2021 |
35İzleyin | CVE-2021-36776İstismar yok | Steve API proxy impersonationrancher · rancher · CWE-284 | Yüksek8,8 | — | %1,1 | 4 Nis 2022 |
35İzleyin | CVE-2021-31999İstismar yok | Rancher: Privilege escalation vulnerability via malicious Connection headerrancher · rancher · CWE-807 | Yüksek8,8 | — | %1,0 | 15 Tem 2021 |
35İzleyin | CVE-2021-25318İstismar yok | rancher: API group not properly specified when creating Kubernetes RBAC resourcesrancher · rancher · CWE-732 | Yüksek8,8 | — | %1,0 | 15 Tem 2021 |
35İzleyin | CVE-2021-36775İstismar yok | Deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindingsrancher · rancher · CWE-284 | Yüksek8,8 | — | %0,9 | 4 Nis 2022 |
34İzleyin | CVE-2023-32194İstismar yok | Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'suse · rancher · CWE-269 | Yüksek8,6 | — | %0,4 | 16 Eki 2024 |
33İzleyin | CVE-2023-32193İstismar yok | Norman API Cross-site Scripting Vulnerabilitysuse · norman · CWE-80 | Yüksek8,3 | — | %0,4 | 16 Eki 2024 |
30İzleyin | CVE-2023-32196İstismar yok | Rancher's External RoleTemplates can lead to privilege escalationsuse · rancher · CWE-269 | Yüksek7,5 | — | %0,5 | 16 Eki 2024 |
- CVE-2021-2532039İzleyin
Rancher: Cloud credentials can be used through proxy API by users without access
KritikCVSS 9,9İstismar yokEPSS %0rancher · rancher15 Tem 2021
- CVE-2021-3677635İzleyin
Steve API proxy impersonation
YüksekCVSS 8,8İstismar yokEPSS %1rancher · rancher4 Nis 2022
- CVE-2021-3199935İzleyin
Rancher: Privilege escalation vulnerability via malicious Connection header
YüksekCVSS 8,8İstismar yokEPSS %1rancher · rancher15 Tem 2021
- CVE-2021-2531835İzleyin
rancher: API group not properly specified when creating Kubernetes RBAC resources
YüksekCVSS 8,8İstismar yokEPSS %1rancher · rancher15 Tem 2021
- CVE-2021-3677535İzleyin
Deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings
YüksekCVSS 8,8İstismar yokEPSS %0rancher · rancher4 Nis 2022
- CVE-2023-3219434İzleyin
Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'
YüksekCVSS 8,6İstismar yokEPSS %0suse · rancher16 Eki 2024
- CVE-2023-3219333İzleyin
Norman API Cross-site Scripting Vulnerability
YüksekCVSS 8,3İstismar yokEPSS %0suse · norman16 Eki 2024
- CVE-2023-3219630İzleyin
Rancher's External RoleTemplates can lead to privilege escalation
YüksekCVSS 7,5İstismar yokEPSS %0suse · rancher16 Eki 2024