CVE-2022-21947
rancher desktop: Dashboard API is network accessible
概要
rancher desktop: Dashboard API is network accessible
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.suse.com