CVE-2023-32197CWE-269

Rancher's External RoleTemplates can lead to privilege escalation

High · published April 16, 2025

CVSS v4.0
7.5
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5.

The record
Technical detail
CVSS v4.0
7.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00625 · 49.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-04-16T08:40Z
EPSS history
Timeline
  • 16 APR 08:40Z
    Rancher's External RoleTemplates can lead to privilege escalation
    cvelistv5