Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-12274

In Rancher 1 and 2 through 2.2.3, unprivileged users (if allowed to deploy nodes) can gain admin access to the Rancher management plane because node driver options intentionally allow posting certain data to the cloud. The problem is that a user could choose to post a sensitive file such as /root/.kube/config or /var/lib/rancher/management-state/cred/kubeconfig-system.yaml.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.8%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 4.0
Products affected by CVE-2019-12274
  • Suse » Rancher » Version: 1.0.0
    cpe:2.3:a:suse:rancher:1.0.0
  • Suse » Rancher » Version: 1.2.0
    cpe:2.3:a:suse:rancher:1.2.0
  • Suse » Rancher » Version: 1.2.1
    cpe:2.3:a:suse:rancher:1.2.1
  • Suse » Rancher » Version: 1.2.2
    cpe:2.3:a:suse:rancher:1.2.2
  • Suse » Rancher » Version: 1.2.3
    cpe:2.3:a:suse:rancher:1.2.3
  • Suse » Rancher » Version: 1.2.4
    cpe:2.3:a:suse:rancher:1.2.4
  • Suse » Rancher » Version: 1.3.0
    cpe:2.3:a:suse:rancher:1.3.0
  • Suse » Rancher » Version: 1.3.1
    cpe:2.3:a:suse:rancher:1.3.1
  • Suse » Rancher » Version: 1.3.2
    cpe:2.3:a:suse:rancher:1.3.2
  • Suse » Rancher » Version: 1.3.3
    cpe:2.3:a:suse:rancher:1.3.3
  • Suse » Rancher » Version: 1.3.4
    cpe:2.3:a:suse:rancher:1.3.4
  • Suse » Rancher » Version: 1.3.5
    cpe:2.3:a:suse:rancher:1.3.5
  • Suse » Rancher » Version: 1.4.0
    cpe:2.3:a:suse:rancher:1.4.0
  • Suse » Rancher » Version: 1.4.1
    cpe:2.3:a:suse:rancher:1.4.1
  • Suse » Rancher » Version: 1.4.2
    cpe:2.3:a:suse:rancher:1.4.2
  • Suse » Rancher » Version: 1.4.3
    cpe:2.3:a:suse:rancher:1.4.3
  • Suse » Rancher » Version: 1.5.0
    cpe:2.3:a:suse:rancher:1.5.0
  • Suse » Rancher » Version: 1.5.1
    cpe:2.3:a:suse:rancher:1.5.1
  • Suse » Rancher » Version: 1.5.2
    cpe:2.3:a:suse:rancher:1.5.2
  • Suse » Rancher » Version: 1.5.3
    cpe:2.3:a:suse:rancher:1.5.3
  • Suse » Rancher » Version: 1.5.5
    cpe:2.3:a:suse:rancher:1.5.5
  • Suse » Rancher » Version: 1.6.18
    cpe:2.3:a:suse:rancher:1.6.18
  • Suse » Rancher » Version: 1.6.19
    cpe:2.3:a:suse:rancher:1.6.19
  • Suse » Rancher » Version: 1.6.20
    cpe:2.3:a:suse:rancher:1.6.20
  • Suse » Rancher » Version: 1.6.21
    cpe:2.3:a:suse:rancher:1.6.21
  • Suse » Rancher » Version: 1.6.22
    cpe:2.3:a:suse:rancher:1.6.22
  • Suse » Rancher » Version: 1.6.23
    cpe:2.3:a:suse:rancher:1.6.23
  • Suse » Rancher » Version: 1.6.24
    cpe:2.3:a:suse:rancher:1.6.24
  • Suse » Rancher » Version: 1.6.25
    cpe:2.3:a:suse:rancher:1.6.25
  • Suse » Rancher » Version: 1.6.26
    cpe:2.3:a:suse:rancher:1.6.26
  • Suse » Rancher » Version: 1.6.28
    cpe:2.3:a:suse:rancher:1.6.28
  • Suse » Rancher » Version: 2.0.0
    cpe:2.3:a:suse:rancher:2.0.0
  • Suse » Rancher » Version: 2.0.1
    cpe:2.3:a:suse:rancher:2.0.1
  • Suse » Rancher » Version: 2.0.10
    cpe:2.3:a:suse:rancher:2.0.10
  • Suse » Rancher » Version: 2.0.11
    cpe:2.3:a:suse:rancher:2.0.11
  • Suse » Rancher » Version: 2.0.12
    cpe:2.3:a:suse:rancher:2.0.12
  • Suse » Rancher » Version: 2.0.13
    cpe:2.3:a:suse:rancher:2.0.13
  • Suse » Rancher » Version: 2.0.2
    cpe:2.3:a:suse:rancher:2.0.2
  • Suse » Rancher » Version: 2.0.3
    cpe:2.3:a:suse:rancher:2.0.3
  • Suse » Rancher » Version: 2.0.4
    cpe:2.3:a:suse:rancher:2.0.4
  • Suse » Rancher » Version: 2.0.5
    cpe:2.3:a:suse:rancher:2.0.5
  • Suse » Rancher » Version: 2.0.6
    cpe:2.3:a:suse:rancher:2.0.6
  • Suse » Rancher » Version: 2.0.7
    cpe:2.3:a:suse:rancher:2.0.7
  • Suse » Rancher » Version: 2.0.8
    cpe:2.3:a:suse:rancher:2.0.8
  • Suse » Rancher » Version: 2.0.9
    cpe:2.3:a:suse:rancher:2.0.9
  • Suse » Rancher » Version: 2.1.0
    cpe:2.3:a:suse:rancher:2.1.0
  • Suse » Rancher » Version: 2.1.1
    cpe:2.3:a:suse:rancher:2.1.1
  • Suse » Rancher » Version: 2.1.14
    cpe:2.3:a:suse:rancher:2.1.14
  • Suse » Rancher » Version: 2.1.2
    cpe:2.3:a:suse:rancher:2.1.2
  • Suse » Rancher » Version: 2.1.3
    cpe:2.3:a:suse:rancher:2.1.3
  • Suse » Rancher » Version: 2.1.4
    cpe:2.3:a:suse:rancher:2.1.4
  • Suse » Rancher » Version: 2.1.5
    cpe:2.3:a:suse:rancher:2.1.5
  • Suse » Rancher » Version: 2.1.6
    cpe:2.3:a:suse:rancher:2.1.6
  • Suse » Rancher » Version: 2.1.7
    cpe:2.3:a:suse:rancher:2.1.7
  • Suse » Rancher » Version: 2.1.8
    cpe:2.3:a:suse:rancher:2.1.8
  • Suse » Rancher » Version: 2.2.0
    cpe:2.3:a:suse:rancher:2.2.0
  • Suse » Rancher » Version: 2.2.1
    cpe:2.3:a:suse:rancher:2.2.1
  • Suse » Rancher » Version: 2.2.2
    cpe:2.3:a:suse:rancher:2.2.2
  • Suse » Rancher » Version: 2.2.3
    cpe:2.3:a:suse:rancher:2.2.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved