Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered that affects the following versions of Rancher: v2.0.0 through v2.0.13, v2.1.0 through v2.1.8, and v2.2.0 through 2.2.1. When Rancher starts for the first time, it creates a default admin user with a well-known password. After initial setup, the Rancher administrator may choose to delete this default admin user. If Rancher is restarted, the default admin user will be recreated with the well-known default password. An attacker could exploit this by logging in with the default admin credentials. This can be mitigated by deactivating the default admin user rather than completing deleting them.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rancher Labs Rancher 授权问题漏洞
Vulnerability Description
Rancher Labs Rancher是美国Rancher Labs公司的一套开源的企业级容器管理平台。 Rancher Labs Rancher 2.0.0版本至2.0.13版本、2.1.0版本至2.1.8版本和2.2.0版本至2.2.1版本中存在授权问题漏洞，该漏洞源于在第一次启动时，程序所创建的默认管理员账户带有默认的密码，即使被删除后，一旦被重启，该默认账户又会重新被创建。攻击者可利用该漏洞进行登录。
CVSS Information
N/A
Vulnerability Type
N/A