Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-43759

A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to escalate permissions for any -promoted resource in any cluster. This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.1%
CVSS Severity
CVSS v3 Score 7.2
Products affected by CVE-2022-43759
  • Suse » Rancher » Version: 2.5.0
    cpe:2.3:a:suse:rancher:2.5.0
  • Suse » Rancher » Version: 2.5.1
    cpe:2.3:a:suse:rancher:2.5.1
  • Suse » Rancher » Version: 2.5.10
    cpe:2.3:a:suse:rancher:2.5.10
  • Suse » Rancher » Version: 2.5.11
    cpe:2.3:a:suse:rancher:2.5.11
  • Suse » Rancher » Version: 2.5.12
    cpe:2.3:a:suse:rancher:2.5.12
  • Suse » Rancher » Version: 2.5.13
    cpe:2.3:a:suse:rancher:2.5.13
  • Suse » Rancher » Version: 2.5.2
    cpe:2.3:a:suse:rancher:2.5.2
  • Suse » Rancher » Version: 2.5.3
    cpe:2.3:a:suse:rancher:2.5.3
  • Suse » Rancher » Version: 2.5.4
    cpe:2.3:a:suse:rancher:2.5.4
  • Suse » Rancher » Version: 2.5.5
    cpe:2.3:a:suse:rancher:2.5.5
  • Suse » Rancher » Version: 2.5.6
    cpe:2.3:a:suse:rancher:2.5.6
  • Suse » Rancher » Version: 2.5.7
    cpe:2.3:a:suse:rancher:2.5.7
  • Suse » Rancher » Version: 2.5.8
    cpe:2.3:a:suse:rancher:2.5.8
  • Suse » Rancher » Version: 2.5.9
    cpe:2.3:a:suse:rancher:2.5.9
  • Suse » Rancher » Version: 2.6.0
    cpe:2.3:a:suse:rancher:2.6.0
  • Suse » Rancher » Version: 2.6.1
    cpe:2.3:a:suse:rancher:2.6.1
  • Suse » Rancher » Version: 2.6.2
    cpe:2.3:a:suse:rancher:2.6.2
  • Suse » Rancher » Version: 2.6.3
    cpe:2.3:a:suse:rancher:2.6.3
  • Suse » Rancher » Version: 2.6.4
    cpe:2.3:a:suse:rancher:2.6.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved