Rancher 权限提升漏洞 CVE-2024-22031：用户可访问任意项目

漏洞概述 漏洞编号: CVE-2024-22031 标题: Rancher: Users who can create Projects can gain access to arbitrary projects 状态: NEW 严重性: Critical 产品: SUSE Security Incidents 组件: Unknown (in other bugs) 版本: unspecified 硬件: Other Other 优先级: P1 - None Severity: Critical 目标里程碑: --- 分配给: Security Team bug QA联系人: Security Team bug URL: https://bugzilla.suse.com/show_bug.cgi?id=1223154 关键词: Whiteboard: --- 依赖: --- 阻塞: --- 报告时间: 2024-04-19 16:01 UTC by Pietro Dell'Aroma 修改时间: 2024-10-15 08:17 UTC (history) CC列表: 4 users (view) 服务优先级: Business Priority 阻塞者: --- 影响范围 产品: SUSE Security Incidents 组件: Unknown (in other bugs) 版本: unspecified 硬件: Other Other 修复方案 状态: NEW 优先级: P1 - None Severity: Critical 目标里程碑: --- 分配给: Security Team bug QA联系人: Security Team bug 评论 1. Marcus Meissner (2024-04-22 14:24:07 UTC) - Note: You need to log in before you can comment on or make changes to this bug. - Comment 1: --- 2. Pietro Dell'Aroma (2024-04-20 13:29:05 UTC) - Comment 2: --- 3. Johannes Segitz (2024-10-15 08:17:51 UTC) - Comment 3: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 附件 Add an attachment (processed patch, text/xml, etc.): --- 其他信息 Clone This Bug: --- See Also: --- Found By: --- Services Priority: Business Priority Blocker: --- 链接 URL: https://bugzilla.suse.com/show_bug.cgi?id=1223154 GitHub链接: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 注释 Note: You need to log in before you can comment on or make changes to this bug. 评论详情 1. Marcus Meissner (2024-04-22 14:24:07 UTC) - Comment 1: --- 2. Pietro Dell'Aroma (2024-04-20 13:29:05 UTC) - Comment 2: --- 3. Johannes Segitz (2024-10-15 08:17:51 UTC) - Comment 3: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 附件 Add an attachment (processed patch, text/xml, etc.): --- 其他信息 Clone This Bug: --- See Also: --- Found By: --- Services Priority: Business Priority Blocker: --- 链接 URL: https://bugzilla.suse.com/show_bug.cgi?id=1223154 GitHub链接: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 注释 Note: You need to log in before you can comment on or make changes to this bug. 评论详情 1. Marcus Meissner (2024-04-22 14:24:07 UTC) - Comment 1: --- 2. Pietro Dell'Aroma (2024-04-20 13:29:05 UTC) - Comment 2: --- 3. Johannes Segitz (2024-10-15 08:17:51 UTC) - Comment 3: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 附件 Add an attachment (processed patch, text/xml, etc.): --- 其他信息 Clone This Bug: --- See Also: --- Found By: --- Services Priority: Business Priority Blocker: --- 链接 URL: https://bugzilla.suse.com/show_bug.cgi?id=1223154 GitHub链接: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 注释 Note: You need to log in before you can comment on or make changes to this bug. 评论详情 1. Marcus Meissner (2024-04-22 14:24:07 UTC) - Comment 1: --- 2. Pietro Dell'Aroma (2024-04-20 13:29:05 UTC) - Comment 2: --- 3. Johannes Segitz (2024-10-15 08:17:51 UTC) - Comment 3: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 附件 Add an attachment (processed patch, text/xml, etc.): --- 其他信息 Clone This Bug: --- See Also: --- Found By: --- Services Priority: Business Priority Blocker: --- 链接 URL: https://bugzilla.suse.com/show_bug.cgi?id=1223154 GitHub链接: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 注释 Note: You need to log in before you can comment on or make changes to this bug. 评论详情 1. Marcus Meissner (2024-04-22 14:24:07 UTC) - Comment 1: --- 2. Pietro Dell'Aroma (2024-04-20 13:29:05 UTC) - Comment 2: --- 3. Johannes Segitz (2024-10-15 08:17:51 UTC) - Comment 3: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 附件 Add an attachment (processed patch, text/xml, etc.): --- 其他信息 Clone This Bug: --- See Also: --- Found By: --- Services Priority: Business Priority Blocker: --- 链接 URL: https://bugzilla.suse.com/show_bug.cgi?id=1223154 GitHub链接: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 注释 Note: You need to log in before you can comment on or make changes to this bug. 评论详情 1. Marcus Meissner (2024-04-22 14:24:07 UTC) - Comment 1: --- 2. Pietro Dell'Aroma (2024-04-20 13:29:05 UTC) - Comment 2: --- 3. Johannes Segitz (2024-10-15 08:17:51 UTC) - Comment 3: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 附件 Add an attachment (processed patch, text/xml, etc.): --- 其他信息 Clone This Bug: --- See Also: --- Found By: --- Services Priority: Business Priority Blocker: --- 链接 URL: https://bugzilla.suse.com/show_bug.cgi?id=1223154 GitHub链接: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 注释 Note: You need to log in before you can comment on or make changes to this bug. 评论详情 1. Marcus Meissner (2024-04-22 14:24:07 UTC) - Comment 1: --- 2. Pietro Dell'Aroma (2024-04-20 13:29:05 UTC) - Comment 2: --- 3. Johannes Segitz (2024-10-15 08:17:51 UTC) - Comment 3: https://github.com/rancher/ui-legacy/blob/8e8e-8e8e-229e 附件 Add an attachment (processed patch, text/xml, etc.): --- 其他信息 Clone This Bug: --- See Also: --- Found By: --- Services Priority: Business Priority Blocker: --- 链接 URL: https://bugzilla.suse.com/show_bug.cgi?id=1223154 GitHub链接:

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Rancher 权限提升漏洞 CVE-2024-22031：用户可访问任意项目

目标达成感谢每一位支持者 — 我们达成了 100% 目标！