CVE-2017-7297

Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call

published March 29, 2017

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3, and rancher/server:v1.5.3.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01489 · 73.7th percentile
Published
2017-03-29T00:00Z
EPSS history
Timeline
  • 29 MAR 00:00Z
    Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call
    cvelistv5