CVE-2023-22648

A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI. This would cause the users to retain their previous permissions in Rancher, even if they change groups on Azure AD, for example, to a lower privileged group, or are removed from a group, thus retaining their access to Rancher instead of losing it. This issue affects Rancher: from >= 2.6.7 before < 2.6.13, from >= 2.7.0 before < 2.7.4.

CVSS v3 8.0 HIGH

8.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.1 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22648	Issue Tracking Vendor Advisory
https://github.com/rancher/rancher/security/advisories/GHSA-vf6j-6739-78m8	Vendor Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22648	Issue Tracking Vendor Advisory
https://github.com/rancher/rancher/security/advisories/GHSA-vf6j-6739-78m8	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:suse:rancher::::::::
	cpe:2.3:a:suse:rancher::::::::

History

24 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de gestión de privilegios incorrecta en SUSE Rancher causa que los cambios de permisos en Azure AD no se reflejen a los usuarios mientras están conectados a la interfaz de usuario de Rancher. Esto causaría que los usuarios retengan sus permisos anteriores en Rancher, incluso si cambian de grupo en Azure AD, por ejemplo, a un grupo con privilegios inferiores, o son eliminados de un grupo, reteniendo así su acceso a Rancher en lugar de perderlo. Este problema afecta a Rancher: desde >= 2.6.7 antes de anterior a 2.6.13, desde >= 2.7.0 antes de anterior a 2.7.4.

Information

Published : 2023-06-01 13:15

Updated : 2026-10-24 13:10

NVD link : CVE-2023-22648

Mitre link : CVE-2023-22648

CVE.ORG link : CVE-2023-22648

JSON object : View

Products Affected

suse

rancher

CWE

CWE-271

Privilege Dropping / Lowering Errors

NVD-CWE-Other

{"id": "CVE-2023-22648", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "meissner@suse.de", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.1}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "meissner@suse.de", "affectedData": [{"vendor": "SUSE", "product": "Rancher", "versions": [{"status": "affected", "version": ">= 2.6.7", "lessThan": "< 2.6.13", "versionType": "2.6.13"}, {"status": "affected", "version": ">= 2.7.0", "lessThan": "< 2.7.4", "versionType": "2.7.4"}], "defaultStatus": "unaffected"}]}], "published": "2023-06-01T13:15:10.553", "references": [{"url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22648", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "meissner@suse.de"}, {"url": "https://github.com/rancher/rancher/security/advisories/GHSA-vf6j-6739-78m8", "tags": ["Vendor Advisory"], "source": "meissner@suse.de"}, {"url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22648", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/rancher/rancher/security/advisories/GHSA-vf6j-6739-78m8", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "meissner@suse.de", "description": [{"lang": "en", "value": "CWE-271"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users \nwhile they are logged in the Rancher UI. This would cause the users to \nretain their previous permissions in Rancher, even if they change groups\n on Azure AD, for example, to a lower privileged group, or are removed \nfrom a group, thus retaining their access to Rancher instead of losing \nit.\nThis issue affects Rancher: from >= 2.6.7 before < 2.6.13, from >= 2.7.0 before < 2.7.4."}, {"lang": "es", "value": "Una vulnerabilidad de gesti\u00f3n de privilegios incorrecta en SUSE Rancher causa que los cambios de permisos en Azure AD no se reflejen a los usuarios mientras est\u00e1n conectados a la interfaz de usuario de Rancher. Esto causar\u00eda que los usuarios retengan sus permisos anteriores en Rancher, incluso si cambian de grupo en Azure AD, por ejemplo, a un grupo con privilegios inferiores, o son eliminados de un grupo, reteniendo as\u00ed su acceso a Rancher en lugar de perderlo.\nEste problema afecta a Rancher: desde >= 2.6.7 antes de anterior a 2.6.13, desde >= 2.7.0 antes de anterior a 2.7.4."}], "lastModified": "2026-10-24T13:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73DA4714-217D-4F50-B3C6-E60FA9389946", "versionEndExcluding": "2.6.13", "versionStartIncluding": "2.6.7"}, {"criteria": "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82B60ABA-3389-45F0-9F45-4D4D0D4738BC", "versionEndExcluding": "2.7.4", "versionStartIncluding": "2.7.0"}], "operator": "OR"}]}], "sourceIdentifier": "meissner@suse.de"}