CVE-2022-31247

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project role template bindings (such as cluster-owner, manage cluster members, project-owner and manage project members) to gain owner permission in another project in the same cluster or in another project on a different downstream cluster. This issue affects: SUSE Rancher Rancher versions prior to 2.6.7; Rancher versions prior to 2.5.16.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-285

Affected software

Vendor	Product	Versions
SUSE	Rancher	>= Rancher, < 2.6.7
SUSE	Rancher	>= Rancher, < 2.5.16

References

https://bugzilla.suse.com/show_bug.cgi?id=1199730Exploit, Issue Tracking, Mitigation, Vendor Advisory
https://github.com/rancher/rancher/security/advisories/GHSA-6x34-89p7-95wgExploit, Mitigation, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1199730Exploit, Issue Tracking, Mitigation, Vendor Advisory
https://github.com/rancher/rancher/security/advisories/GHSA-6x34-89p7-95wgExploit, Mitigation, Third Party Advisory

Timeline

Published: Sep 7, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-312485.3A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attacker CVE-2022-312499.8A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler of SUSE Rancher allow CVE-2022-31258.8The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arb CVE-2022-312507.8A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime CVE-2022-312516.3A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with contro CVE-2022-312524.4A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE CVE-2022-312537.8A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to chan CVE-2022-312547.8A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterp CVE-2022-312554.3An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise CVE-2022-312567.8A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUS CVE-2022-312577.5A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All CVE-2022-312586.7In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.