CVE-2021-25318

CVE-2021-25318, security advisory, suse linux, suse, security, cve

CVE-2021-25318

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2021-25318 at MITRE

Description

A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to. This issue affects: Rancher versions prior to 2.5.9 ; Rancher versions prior to 2.4.16.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	6.5
Vector	AV:N/AC:L/Au:S/C:P/I:P/A:P
Access Vector	Network
Access Complexity	Low
Authentication	Single
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

CVSS v3 Scores

	National Vulnerability Database	SUSE
Base Score	8.8	8.8
Vector	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector	Network	Network
Attack Complexity	Low	Low
Privileges Required	Low	Low
User Interaction	None	None
Scope	Unchanged	Unchanged
Confidentiality Impact	High	High
Integrity Impact	High	High
Availability Impact	High	High
CVSSv3 Version	3.1	3.1

SUSE Bugzilla entry: 1184913 [RESOLVED / FIXED]

SUSE Security Advisories:

• GHSA-f9xf-jq4j-vqw4, published Fri Jul 23 16:55:23 CEST 2021
• RANCHER-CVE-2021-25318, published Thu Jul 15 09:20:23 CEST 2021

---

SUSE Timeline for this CVE

CVE page created: Sat Apr 17 01:26:57 2021
CVE page last modified: Wed Oct 26 23:06:31 2022