Security Advisory

CVE-2017-7297

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-03-29 00:00:00
Last updated 2024-08-05 15:56:36
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3, and rancher/server:v1.5.3.