What’s Vulnerable › Vulnerabilities

CVE-2023-22647

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-01 · updated 2026-10-23
• Weakness: CWE-267

Description

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted, but their read-level permissions to the secret being preserved. When this operation was followed-up by other specially crafted commands, it could result in the user gaining access to tokens belonging to service accounts in the local cluster. This issue affects Rancher: from >= 2.6.0 before < 2.6.13, from >= 2.7.0 before < 2.7.4.

Affected products

• SUSE Rancher: from 2.6.0 before 2.6.13; from 2.7.0 before 2.7.4 — fixed in 2.6.13, 2.7.4

How to fix

Upgrade to a fixed version: SUSE Rancher 2.6.13, 2.7.4. Check the vendor advisory for mitigations.

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22647
• https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22647
• https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6

Get alerted when CVE-2023-22647 or the next vulnerability affects your stack