CVE-2023-32194 — Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'
A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matter the API group, the subject will receive * permissions…
Published: 2024-10-16 · CVSS: 8.6 · CVSS 4.0
A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matter the API group, the subject will receive * permissions for core namespaces. This can lead to someone being capable of accessing, creating, updating, or deleting a namespace in the project.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7