Database/Control plane, storage & DevOps
RKE / Rancher (k8s control plane): full-cluster-state configmap in kube-system readable by non-admins
CVSS 9.9CVE-2023-32191Control plane, storage & DevOpscurated
Impact
full-cluster-state configmap in kube-system readable by non-admins -> escalate to cluster-admin
Who can reach it
Network (remote)
What to do
Control-plane: upgrade RKE; restrict RBAC on kube-system configmaps
References
Related entries
- VMware Aria Automation (missing access control): An authenticated user reaches remote organizations and workflows theyCVE-2023-34063 · VMware Aria Automation (missing access control)Critical
- Cisco Nexus Dashboard Fabric Controller (REST API / web UI): A low-privileged NDFC userCVE-2024-20432 · Cisco Nexus Dashboard Fabric Controller (REST API / web UI)Critical
- Zabbix: SQL injection in CUser::addRelatedObjects reachable by ANY non-admin account with API accessCVE-2024-42327 · ZabbixCritical
- Grafana: SQL Expressions passes user input to duckdb unsanitizedCVE-2024-9264 · GrafanaCritical
- Redis: "RediShell" - authenticated user crafts a Lua script to trigger a use-after-freeCVE-2025-49844 · RedisCritical
- Logging operator: unescaped Flow CRD values inject Fluentd directives and run commands in the aggregatorCVE-2026-54680 · Logging operator (Fluentd config renderer, pkg/sdk/logging/model/render/fluent.go)Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.