CVE-2019-12274
High
Description
In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver options intentionally allow posting certain data to the cloud. The problem is that a user could choose to post a sensitive file such as /root/.kube/config or /var/lib/rancher/management-state/cred/kubeconfig-system.yaml.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Suse Rancher
PublishedJun 6, 2019
First seenJun 6, 2019
How to fix
Update
- github.com/rancher/rancher2.2.4, 1.6.27, 2.2.4+incompatible or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| suse rancher | 1.0.0 ≤ v ≤ 1.6.28, 2.0.0 ≤ v ≤ 2.2.3 | — |
| github.com/rancher/rancherGo | 2.0.0 ≤ v < 2.2.4, v < 1.6.27, 2.0.0+incompatible ≤ v < 2.2.4+incompatible | 2.2.4, 1.6.27, 2.2.4+incompatible |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.