PT-2023-14313 · Suse · Suse Rancher

Guilherme Macedo

·

Published

2023-01-25

·

Updated

2023-02-15

·

CVE-2022-43759

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SUSE Rancher versions prior to 2.5.17 SUSE Rancher versions prior to 2.6.10
Description A Improper Privilege Management vulnerability in SUSE Rancher allows users with access to the escalate verb on PRTBs to escalate permissions for any -promoted resource in any cluster. This issue affects users with access to the escalate verb on PRTBs, including users with * verbs on PRTBs. The vulnerability can be exploited by users without the mentioned permissions if a role template with access to those objects was already created by another user in the cluster.
The following resources are affected:
  • navlinks
  • nodes
  • persistentvolumes
  • storageclasses
  • apiservices
  • clusterrepos
  • clusters
Recommendations For SUSE Rancher versions prior to 2.5.17, update to version 2.5.17 or later. For SUSE Rancher versions prior to 2.6.10, update to version 2.6.10 or later. As a temporary workaround, consider restricting access to the projectroletemplatebindings resource and minimizing the creation of custom roles that contain the escalate, * or write verbs on projectroletemplatebindings resource. Only grant Project Owner and Manage Project Members roles to trusted users. Minimize the number of users that have permissions to create, patch and update roletemplates.

Exploit

Fix

Improper Access Control

Improper Privilege Management

Weakness Enumeration

CWE-284CWE-269

Related Identifiers

CVE-2022-43759
GHSA-7M72-MH5R-6J3R

Affected Products

Suse Rancher