Improper Access Control

2023-02-0305:51:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

rancher

authenticated attacker

shell pod

kubectl access

EPSS

0.001

Percentile

37.5%

JSON

github.com/rancher/rancher is vulnerable to Improper Access Control. The vulnerability exists in proxy.go where an authorization logic flaw allows an authenticated attacker on any downstream cluster to open a shell pod in the Rancher local cluster or have limited kubectl access to the pod.