Executive brief
Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists in github.com/rancher/rancher
Affected products
- Go github.com/rancher/rancher
CVE identifiers
- CVE-2023-32196
- CVE-2023-32197
Junglewise Threat Intelligence
CVE-2023-32196: GO-2024-3220 - Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists in github.com/rancher/rancher
CVE-2023-32196 · Severity: low · CVSS 3.1 · Published 2024-10-28
Technologies: github.com/rancher/rancher (Go). Vendors: Go.
Related threats
- SUSE Rancher privilege escalation in GitHub App authentication provider
- SUSE Rancher privilege escalation in Project Owner role
- SUSE Rancher command injection in cluster import endpoint
- SUSE Rancher path traversal in UI Extensions
- GO-2026-4590 - Rancher's restricted PodSecurityPolicy does not prevent containers from running as a privileged user in github.com/rancher/rancher