CVE-2023-22647
CriticalCVSS 9.9Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted while read-level permissions were preserved. Followed by specially crafted commands, this could let a user gain access to tokens belonging to service accounts in the local cluster. Affects Rancher >= 2.6.0 < 2.6.13 and >= 2.7.0 < 2.7.4.
Risk Assessment
A standard user could escalate privileges and obtain service account tokens, potentially leading to takeover of the Kubernetes cluster.
Recommendation
Update Rancher to 2.6.13 or later, or 2.7.4 or later. Review user permissions and audit secret access.
Other vulnerabilities in SUSE Rancher
See all- CVE-2026-88804Critical
In SUSE Rancher (versions 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14, and 2.11 before 2.11.18), an unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting (XSS) attack in the Rancher UI.
- CVE-2026-88805High
In SUSE Rancher 2.15 before 2.15.2, incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out, potentially leading to unauthorized access.
- CVE-2022-43760High
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to inject code that is executed within another user's browser, enabling theft of sensitive information, content manipulation, or other malicious activities on behalf of victims. This could let a user with write access to affected areas act on behalf of an administrator once the administrator opens the affected web page. The issue affects Rancher from >= 2.6.0 before < 2.6.13 and from >= 2.7.0 before < 2.7.4.
Original NVD description (English source)
An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted, but their read-level permissions to the secret being preserved. When this operation was followed-up by other specially crafted commands, it could result in the user gaining access to tokens belonging to service accounts in the local cluster. This issue affects Rancher: from >= 2.6.0 before < 2.6.13, from >= 2.7.0 before < 2.7.4.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS