https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:33:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-04031 bdu:2021-04031 https://cve.radiocsirt.org/vuln/bdu:2021-04031 https://cve.radiocsirt.org/vuln/cnvd-2022-65018 cnvd-2022-65018 https://cve.radiocsirt.org/vuln/cnvd-2022-65018 https://cve.radiocsirt.org/vuln/euvd-2026-172158 EUVD-2026-172158 https://cve.radiocsirt.org/vuln/euvd-2026-172158 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25318 <p>A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to. This issue affects: Rancher versions prior to 2.5.9 ; Rancher versions prior to 2.4.16.</p> <p>A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to. This issue affects: Rancher versions prior to 2.5.9 ; Rancher versions prior to 2.4.16.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25318 https://cve.radiocsirt.org/vuln/ghsa-f9xf-jq4j-vqw4 <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>A vulnerability was discovered in Rancher versions 2.0 through the aforementioned fixed versions, where users were granted access to resources regardless of the resource&#39;s API group. For example Rancher should have allowed users access to `apps.catalog.cattle.io`, but instead incorrectly gave access to `apps.*`. Resource affected include:</p> <p>**Downstream clusters:** apiservices clusters clusterrepos persistentvolumes storageclasses</p> <p>**Rancher management cluster** apprevisions apps catalogtemplates catalogtemplateversions clusteralertgroups clusteralertrules clustercatalogs clusterloggings clustermonitorgraphs clusterregistrationtokens clusterroletemplatebindings clusterscans etcdbackups nodepools nodes notifiers pipelineexecutions pipelines pipelinesettings podsecuritypolicytemplateprojectbindings projectalertgroups projectalertrules projectcatalogs projectloggings projectmonitorgraphs projectroletemplatebindings projects secrets sourcecodeproviderconfigs</p> <p>There is not a direct mitigation besides upgrading to the patched Rancher versions.</p> <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>A vulnerability was discovered in Rancher versions 2.0 through the aforementioned fixed versions, where users were granted access to resources regardless of the resource&#39;s API group. For example Rancher should have allowed users access to `apps.catalog.cattle.io`, but instead incorrectly gave access to `apps.*`. Resource affected include:</p> <p>**Downstream clusters:** apiservices clusters clusterrepos persistentvolumes storageclasses</p> <p>**Rancher management cluster** apprevisions apps catalogtemplates catalogtemplateversions clusteralertgroups clusteralertrules clustercatalogs clusterloggings clustermonitorgraphs clusterregistrationtokens clusterroletemplatebindings clusterscans etcdbackups nodepools nodes notifiers pipelineexecutions pipelines pipelinesettings podsecuritypolicytemplateprojectbindings projectalertgroups projectalertrules projectcatalogs projectloggings projectmonitorgraphs projectroletemplatebindings projects secrets sourcecodeproviderconfigs</p> <p>There is not a direct mitigation besides upgrading to the patched Rancher versions.</p> https://cve.radiocsirt.org/vuln/ghsa-f9xf-jq4j-vqw4 https://cve.radiocsirt.org/vuln/gsd-2021-25318 gsd-2021-25318 https://cve.radiocsirt.org/vuln/gsd-2021-25318