CVE-2021-36778

Published: May 2, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers. This issue affects: SUSE Rancher Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.

Affected (2)

Products: Suse: Rancher

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Suse Rancher	Before 2.5.12
Suse Rancher	From 2.6.0 to 2.6.3

Related CWEs

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

https://bugzilla.suse.com/show_bug.cgi?id=1191466

Source: meissner@suse.de

Issue TrackingVendor Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1191466

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.