PT-2017-17643 · Rancher · Rancher Server

Will-Chan · Publicado 2017-03-29 · Atualizado 2024-08-20 · CVE-2017-7297

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rancher Labs rancher server versions 1.2.0 through 1.2.3 Rancher Labs rancher server versions 1.3.0 through 1.3.4 Rancher Labs rancher server versions 1.4.0 through 1.4.2 Rancher Labs rancher server versions 1.5.0 through 1.5.2

Description The issue allows authenticated users to disable access control via an API call.

Recommendations For versions 1.2.0 through 1.2.3, update to rancher/server:v1.2.4. For versions 1.3.0 through 1.3.4, update to rancher/server:v1.3.5. For versions 1.4.0 through 1.4.2, update to rancher/server:v1.4.3. For versions 1.5.0 through 1.5.2, update to rancher/server:v1.5.3.

Correção

Identificadores relacionados

CVE-2017-7297

GHSA-W3X4-9854-95X8

GO-2023-1973

Produtos afetados

Rancher Server

Referências · 10

• https://github.com/rancher/rancher · Nota
• https://github.com/rancher/rancher/issues/8296 · Nota
• https://web.archive.org/web/20200227181556/http://securityfocus.com/bid/97180 · Nota
• https://osv.dev/vulnerability/GO-2023-1973 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7297 · Nota de Segurança
• https://t.me/cvenotify/24096 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-w3x4-9854-95x8 · Aviso do Fabricante
• https://github.com/advisories/GHSA-w3x4-9854-95x8 · Nota
• https://osv.dev/vulnerability/CVE-2017-7297 · Aviso do Fabricante
• http://securityfocus.com/bid/97180 · Nota