CVE-2022-21947

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-668

Affected software

No affected versions have been published.

Timeline

Published: Apr 1, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-219486.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows remote attackers to pl CVE-2022-219498.8A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference extern CVE-2022-219505.3A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allow CVE-2022-219516.8A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change CVE-2022-219527.5A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows re CVE-2022-219538.8A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in CVE-2022-219546.1Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-219577.2Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability CVE-2022-219586.8Windows Resilient File System (ReFS) Remote Code Execution Vulnerability CVE-2022-219596.8Windows Resilient File System (ReFS) Remote Code Execution Vulnerability CVE-2022-21968.8A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks CVE-2022-219606.8Windows Resilient File System (ReFS) Remote Code Execution Vulnerability