CVE-2022-21947

2022-04-0107:15:07

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

JSON

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

CPENameOperatorVersion
rancher-desktopeq0.2.0
rancher-desktopeq1.0.0
rancher-desktopeq0.2.1
rancher-desktopeq0.1.0
rancher-desktopeq0.4.0
rancher-desktopeq0.6.0
rancher-desktopeq1.1.0
rancher-desktopeq1.2.0
rancher-desktopeq1.0.0-beta.1
rancher-desktopeq0.7.0

Name	Operator	Version
rancher-desktop	eq	0.2.0
rancher-desktop	eq	1.0.0
rancher-desktop	eq	0.2.1
rancher-desktop	eq	0.1.0
rancher-desktop	eq	0.4.0
rancher-desktop	eq	0.6.0
rancher-desktop	eq	1.1.0
rancher-desktop	eq	1.2.0
rancher-desktop	eq	1.0.0-beta.1
rancher-desktop	eq	0.7.0

Rows per page:

1-10 of 141

References

bugzilla.suse.com/show_bug.cgi?id=1197491