tocsin

CVE-2023-32196

4 advisories.

Go/github.com/rancher/rancher CVE-2023-32196, CVE-2023-32197: medium 6.6, EPSS 0.55%

Rancher's External RoleTemplates can lead to privilege escalation

Action: Upgrade github.com/rancher/rancher to 2.7.14 or later.

go get github.com/rancher/rancher@v2.7.14
go get github.com/rancher/rancher@v2.8.5

Affected

introducedfixedlast affected
2.7.02.7.14-
2.8.02.8.5-

Fixed versions

2.7.142.8.5

Sources

CVE-2023-32196, CVE-2023-32197 · published · modified · JSON

Go/github.com/rancher/rancher CVE-2023-32196, CVE-2023-32197: critical 9.1, EPSS 0.55%

Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists

Action: Upgrade github.com/rancher/rancher to 2.8.9 or later.

go get github.com/rancher/rancher@v2.8.9
go get github.com/rancher/rancher@v2.9.3

Affected

introducedfixedlast affected
2.7.02.8.9-
2.9.02.9.3-

Fixed versions

2.8.92.9.3

Sources

CVE-2023-32196, CVE-2023-32197 · published · modified · JSON

Go/github.com/rancher/rancher CVE-2023-32196, CVE-2023-32197: unknown, EPSS 0.55%

Rancher's External RoleTemplates can lead to privilege escalation in github.com/rancher/rancher

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2023-32196, CVE-2023-32197 · published · modified · JSON

Go/github.com/rancher/rancher CVE-2023-32196, CVE-2023-32197: unknown, EPSS 0.55%

Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists in github.com/rancher/rancher

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2023-32196, CVE-2023-32197 · published · modified · JSON