VULNERABILITY INTELLIGENCE

CVE-2022-21947

CVSS score8.3 HIGH
EPSS probability0.61%
CISA KEVNot currently listed
Published2022-04-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Description

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

Weakness classification

  • meissner@suse.de: CWE-668
  • nvd@nist.gov: CWE-668

Primary references