CVE-2021-25318
Fixed in a distro release EPSS 1%CVSS 8.8
A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to. This issue affects: Rancher versions prior to 2.5.9 ; Rancher versions prior to 2.4.16.
Products: Rancher
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/rancher/rancher | 2.4.16 |
| Go | github.com/rancher/rancher | 2.5.9 |
| Go | github.com/rancher/rancher | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | harvester | 0 |
| Chainguard | harvester-fips | 0 |
| Chainguard | harvester-fips-webhook | 0 |
| Chainguard | harvester-webhook | 0 |