Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-12274

In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver options intentionally allow posting certain data to the cloud. The problem is that a user could choose to post a sensitive file such as /root/.kube/config or /var/lib/rancher/management-state/cred/kubeconfig-system.yaml.

Published

2019-06-06T16:29:01.247

Last Modified

2024-11-21T04:22:32.647

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

8.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-668
CWE-862

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	suse	rancher	≤ 1.6.28	Yes
Application	suse	rancher	≤ 2.2.3	Yes

References

https://forums.rancher.com/c/announcements Release Notes, Vendor Advisory ([email protected])
https://forums.rancher.com/t/rancher-release-v2-2-4-addresses-rancher-cve-2019-12274-and-cve-2019-12303/14466 Release Notes, Vendor Advisory ([email protected])
https://forums.rancher.com/c/announcements Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://forums.rancher.com/t/rancher-release-v2-2-4-addresses-rancher-cve-2019-12274-and-cve-2019-12303/14466 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)