{"id":"EUVD-2023-1854","enisaUuid":"3a2913a4-42ae-3ee5-98d8-e441e406f083","description":"An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local\n cluster, resulting in the secret being deleted, but their read-level \npermissions to the secret being preserved. When this operation was \nfollowed-up by other specially crafted commands, it could result in the \nuser gaining access to tokens belonging to service accounts in the local cluster.\n\n\nThis issue affects Rancher: from \u003e\u003d 2.6.0 before \u003c 2.6.13, from \u003e\u003d 2.7.0 before \u003c 2.7.4.","datePublished":"Jun 1, 2023, 12:52:49 PM","dateUpdated":"Jan 9, 2025, 5:00:41 PM","baseScore":9.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6\nhttps://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2023-22647\n","aliases":"CVE-2023-22647\nGHSA-p976-h52c-26p6\n","assigner":"suse","epss":0.72,"enisaIdProduct":[{"id":"76a29e66-a303-3f3a-a715-95851b5ee7e8","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.7.0 \u003c\u003c 2.7.4"},{"id":"8db658ae-c059-3ba5-93bc-cdc5db780907","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.6.0 \u003c\u003c 2.6.13"}],"enisaIdVendor":[{"id":"1b6f4dc2-b2e8-36bf-aecf-ec74f66351fa","vendor":{"name":"SUSE"}}],"enisaIdVulnerability":[{"id":"1fb395e7-4162-30a5-8da7-0cfb11d9ffc1","vulnerability":{"id":"GHSA-p976-h52c-26p6","description":"Rancher vulnerable to Privilege Escalation via manipulation of Secrets","datePublished":"Jun 6, 2023, 2:00:28 AM","dateUpdated":"Sep 16, 2024, 3:07:40 PM","baseScore":null,"references":"https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-22647\nhttps://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2023-22647\nhttps://github.com/rancher/rancher\nhttps://github.com/rancher/rancher/releases/tag/v2.6.13\nhttps://github.com/rancher/rancher/releases/tag/v2.7.4\n","enisa_id":"EUVD-2023-1854\n","aliases":"GHSA-p976-h52c-26p6\nCVE-2023-22647\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:06:49 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"c9e31057-577e-388f-879b-64b12416c815","vulnerability":{"id":"CVE-2023-22647","description":"An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local\n cluster, resulting in the secret being deleted, but their read-level \npermissions to the secret being preserved. When this operation was \nfollowed-up by other specially crafted commands, it could result in the \nuser gaining access to tokens belonging to service accounts in the local cluster.\n\n\nThis issue affects Rancher: from \u003e\u003d 2.6.0 before \u003c 2.6.13, from \u003e\u003d 2.7.0 before \u003c 2.7.4.","datePublished":"Jun 1, 2023, 12:52:49 PM","dateUpdated":"Jan 9, 2025, 5:00:41 PM","status":"PUBLISHED","baseScore":9.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6\nhttps://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2023-22647\n","enisa_id":"EUVD-2023-1854\n","assigner":"suse","epss":0.72,"dataProcessed":"Oct 24, 2026, 7:17:25 AM","vulnerabilityProduct":[{"id":"0f2f95c8-edd7-32ce-96fa-83bec54d0a7d","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.6.0 \u003c\u003c 2.6.13"},{"id":"10590575-763a-4cf0-a5f0-826c1fbdfb33","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.6.0 \u003c\u003c 2.6.13"},{"id":"673c78ab-ec2c-43dc-836f-dc58806a7d56","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.7.0 \u003c\u003c 2.7.4"},{"id":"ae2b3f3d-3f1d-3f4c-a962-dc371fef232b","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.7.0 \u003c\u003c 2.7.4"}],"vulnerabilityVendor":[{"id":"6f1101d6-b48d-32c9-b428-faa9422480a4","vendor":{"name":"SUSE"}}]}}],"enisaIdAdvisory":[{"id":"7bca7140-ac22-3908-9fea-650b7f326f90","advisory":{"id":"WID-SEC-W-2023-1340","description":"Rancher: Mehrere Schwachstellen","summary":"Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsvorkehrungen zu umgehen oder einen Cross Site Scripting angriff durchzuführen.","datePublished":"May 31, 2023, 10:00:00 PM","dateUpdated":"May 31, 2023, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1340.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2023-1340\n","aliases":"CVE-2023-22648\nCVE-2023-22647\nCVE-2022-43760\nCVE-2020-10676\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"0c39c251-d166-3dd4-8625-7cbc196d3bdf","product":{"name":"Rancher Rancher \u003c 2.7.4","vendor":{"name":"Rancher"}}},{"id":"8d26802f-4ec1-3efb-bc2a-e97d804e1d7f","product":{"name":"Rancher","vendor":{"name":"SUSE"}}},{"id":"e98b1768-8d3f-366d-8401-c8f2b5223632","product":{"name":"Rancher Rancher \u003c 2.6.13","vendor":{"name":"Rancher"}}}]}}]}