CVE-2023-32196
Fixed in a distro release EPSS <1%CVSS 6.6
A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobjects when external=true, which in specific scenarios can lead to privilege escalation.
Products: SUSE Rancher, Rancher
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/rancher/rancher | 2.7.14 |
| Go | github.com/rancher/rancher | 2.8.5 |
| Go | github.com/rancher/rancher | 2.8.9 |
| Go | github.com/rancher/rancher | 2.9.3 |
| Go | github.com/rancher/rancher | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | harvester | 1.8.1-r1 |
| Chainguard | harvester-fips | 1.8.1-r0 |
| Chainguard | harvester-fips-webhook | 1.8.1-r0 |
| Chainguard | harvester-webhook | 1.8.1-r1 |