Vulnerabilities > CVE-2022-21947 - Exposure of Resource to Wrong Sphere vulnerability in Suse Rancher Desktop

047910
CVSS 8.8 - HIGH
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
suse
CWE-668
NVD
Published: 2022-04-01
Updated: 2023-07-06

Summary

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

Vulnerable Configurations

Part Description Count
Application
Suse
17

Common Weakness Enumeration (CWE)

References