Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-21947

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

Published

2022-04-01T07:15:07.407

Last Modified

2024-11-21T06:45:45.707

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.3 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.5

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-668
  • Type: Secondary
    CWE-668
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application suse rancher_desktop < 1.2.1 Yes
References