ByteOS Network

NVD Vulnerability Details :

CVE-2022-21947

Modified

Source-meissner@suse.de

Published At-01 Apr, 2022 | 07:15

Updated At-06 Jul, 2023 | 15:15

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.3	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Primary	2.0	5.8	MEDIUM	AV:A/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.3

Base severity: HIGH

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Type: Primary

Version: 2.0

Base score: 5.8

Base severity: MEDIUM

Vector:

AV:A/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

SUSE

>>rancher_desktop>>Versions before 1.2.1(exclusive)

cpe:2.3:a:suse:rancher_desktop:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-668	Primary	meissner@suse.de
CWE-668	Secondary	nvd@nist.gov

CWE ID: CWE-668

Type: Primary

Source: meissner@suse.de

CWE ID: CWE-668

Type: Secondary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://bugzilla.suse.com/show_bug.cgi?id=1197491	meissner@suse.de	Issue Tracking Third Party Advisory

Hyperlink: https://bugzilla.suse.com/show_bug.cgi?id=1197491

Source: meissner@suse.de

Resource:

Issue Tracking

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History