VDB
CVE-2021-36775
CVE-2021-36775
PUBLISHED
CVSS 8.600000381469727 HIGH
a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. This issue affects: SUSE Rancher Rancher versions prior to 2.4.18; Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.
EPSS 0.97% · 59.4th percentile
Risk Scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.97%
59.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | rancher/rancher | 2.6.0, 0, 2.5.0 |
| SUSE | Rancher | Rancher, Rancher, * |
| rancher | rancher | 0, 2.6.0, 2.5.0 |
Timeline
- Apr 1, 2022 EPSS Score
- Apr 1, 2022 CVE Published
- May 22, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 1, 2022 EPSS Score
- Oct 22, 2022 EPSS Score
- Dec 12, 2022 EPSS Score
- Feb 1, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 13, 2023 EPSS Score
- Jul 3, 2023 EPSS Score
- Aug 23, 2023 EPSS Score