CVE-2023-32194

Go/github.com/rancher/rancher CVE-2023-32194: high 7.2

Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'

Action: Upgrade github.com/rancher/rancher to 2.6.14 or later.

go get github.com/rancher/rancher@v2.6.14

go get github.com/rancher/rancher@v2.7.10

go get github.com/rancher/rancher@v2.8.2

Affected

Fixed versions

Sources

• osv: GHSA-c85r-fwc7-45vc
• https://github.com/rancher/rancher/security/advisories/GHSA-c85r-fwc7-45vc
• https://nvd.nist.gov/vuln/detail/CVE-2023-32194
• https://github.com/rancher/rancher/commit/2f7113dc32d4f1f5375a1ae09b65be58f6801a15
• https://github.com/rancher/rancher/commit/649fdad268d8ecc748e9fdcca2ddcfdc900f9eaa
• https://github.com/rancher/rancher/commit/d4a0ff5e779e3cc5f14d77ce57620e1326ab1c22
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32194
• https://github.com/rancher/rancher

CVE-2023-32194 · published 2024-02-08T18:43:28Z · modified 2026-09-10T03:50:06.151442036Z · JSON

Go/github.com/rancher/rancher CVE-2023-32194: unknown

Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core' in github.com/rancher/rancher

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2535
• https://github.com/rancher/rancher/security/advisories/GHSA-c85r-fwc7-45vc

CVE-2023-32194 · published 2024-06-28T15:28:53Z · modified 2026-07-02T16:59:28.769913269Z · JSON