Vulnerabilities > Suse > Rancher > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-04-10 CVE-2019-6287 Improper Privilege Management vulnerability in Suse Rancher
In Rancher 2.0.0 through 2.1.5, project members have continued access to create, update, read, and delete namespaces in a project after they have been removed from it.
network
low complexity
suse CWE-269
6.5
2017-03-29 CVE-2017-7297 Unspecified vulnerability in Suse Rancher
Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call.
network
low complexity
suse
6.5