CVE-2021-31999

A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16.
References
Link Resource
https://bugzilla.suse.com/show_bug.cgi?id=1187084 Issue Tracking Release Notes
Configurations

Configuration 1

cpe:2.3:a:rancher:rancher:*:*:*:*:*:*:*:*
cpe:2.3:a:rancher:rancher:*:*:*:*:*:*:*:*

Information

Published : 2021-07-15 09:15

Updated : 2021-07-30 01:42


NVD link : CVE-2021-31999

Mitre link : CVE-2021-31999

Products Affected
No products.
CWE