CVE-2023-32199

Description

Rancher user retains access to clusters despite Global Role removal in github.com/rancher/rancher

Affected packages (2)

• Go/github.com/rancher/rancherfrom 0, < 0.0.0-20251014212116-7faa74a968c2
• Go/github.com/rancher/rancherfrom 0, < 0.0.0-20251014212116-7faa74a968c2

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-32199
• PATCHhttps://github.com/rancher/rancher
• WEBhttps://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32199
• WEBhttps://github.com/rancher/rancher/pull/52303
• WEBhttps://github.com/rancher/rancher/security/advisories/GHSA-j4vr-pcmw-hx59