CVE-2022-21947

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

Score

CVSS 3.1 8.8 High

Status

Modified - meissner@suse.de

Published

2022-04-01

Last modified

2024-09-16

Weaknesses

CWE-668

Affected products

• Rancher (Suse)
• Rancher Desktop (Suse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1197491