Security Advisory
CVE-2021-31999
8.8
HIGH
Vulnerability Description
A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16.
Published Date
July 15, 2021
Official Source
NIST NVD Advisory