Approved changes feed: RSS · Atom

cpe:2.3:a:rancher:suse_linux_enterprise_server_15:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRancher (d9346c87-5425-5d08-9ca2-b6134f26cf8c)
ProductSuse Linux Enterprise Server 15 (88ba2a06-27e3-5416-9cfb-7b263db19b51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31999 vulnerable 2026-06-08 05:31:54.557720 Rancher: Privilege escalation vulnerability via malicious Connection header
HIGH (8.8)
A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16.
Published: 2021-07-15T08:55:18.646Z
Updated: 2024-09-17T02:26:40.038Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.