CVE-2023-32194

Fixed in a distro release EPSS <1%CVSS 7.2

A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matter the API group, the subject will receive * permissions for core namespaces. This can lead to someone being capable of accessing, creating, updating, or deleting a namespace in the project.

Published 2024-10-16 · CVE record · OSV

Products: SUSE Rancher, Rancher

Fixed upstream

Distro releases