UpHeron
All vulnerabilities

Servers and applications

CVE-2023-22651

Rancher Webhook is misconfigured during upgrade process

Severity
Critical 9.9
Published
24 Apr 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Also known as
GHSA-6m9f-pj6w-w87g
Sources
NVD, Project advisories (GitHub)

Description

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into the Kubernetes cluster. The issue only affects users that upgrade from 2.6.x or 2.7.x to 2.7.2. Users…

Affected software

SoftwareAffected versions
RancherServers and applications · cpe:a:suse:rancher
  • From 2.6.0 up to 2.7.2
RancherServers and applications · github:rancher/rancher
  • Version 2.7.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-22651
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-22651
  • GitHub Advisory Database https://github.com/advisories/GHSA-6m9f-pj6w-w87g
  • github.com https://github.com/rancher/rancher/security/advisories/GHSA-6m9f-pj6w-w87g