CVE-2022-21947CWE-668

rancher desktop: Dashboard API is network accessible

High · published April 1, 2022

CVSS v3.1
8.3
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00611 · 48.6th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2022-04-01T06:40Z
EPSS history
Timeline
  • 01 APR 06:40Z
    rancher desktop: Dashboard API is network accessible
    cvelistv5