漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Rancher Remote Code Execution via Cluster/Node Drivers
Vulnerability Description
A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher container itself. For the test and development environments, based on a –privileged Docker container, it is possible to escape the Docker container and gain execution access on the host system. This issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
特权管理不恰当
Vulnerability Title
Rancher 安全漏洞
Vulnerability Description
Rancher是美国Rancher开源的一个开源容器管理平台，专为在生产环境中部署容器的组织而构建。 Rancher 2.7.0版本至2.7.16之前版本、2.8.0版本至2.8.9之前版本和2.9.0版本至2.9.3之前版本存在安全漏洞，该漏洞源于集群或节点驱动可绕过chroot限制，可能导致获得root权限。
CVSS Information
N/A
Vulnerability Type
N/A