CVE-2019-13209
published 2019-09-04CVE-2019-13209: Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The…
PriorityP427medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EPSS
1.10%
61.5th percentile
Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hosted by the exploiter. Once that is accomplished, the exploiter is able to execute commands against the cluster's Kubernetes API with the permissions and identity of the victim.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | rancher_rancher | >= 0 < 2.2.5-rc6.0.20190621200032-0ddffe484adc+incompatible | 2.2.5-rc6.0.20190621200032-0ddffe484adc+incompatible |
| github.com | rancher_rancher | >= 2.0.0 < 2.0.16 | 2.0.16 |
| github.com | rancher_rancher | >= 2.1.0 < 2.1.11 | 2.1.11 |
| github.com | rancher_rancher | >= 2.2.0 < 2.2.5 | 2.2.5 |
| suse | rancher | 2.0.0 – 2.2.4 | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Cross-site request forgery in github.com/rancher/rancher
osv·2021-05-18
CVE-2019-13209 Cross-site request forgery in github.com/rancher/rancher
Cross-site request forgery in github.com/rancher/rancher
Rancher 2 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher.
OSV
Rancher Vulnerable to Cross-site Request Forgery (CSRF)
osv·2021-05-18
CVE-2019-13209 [HIGH] Rancher Vulnerable to Cross-site Request Forgery (CSRF)
Rancher Vulnerable to Cross-site Request Forgery (CSRF)
Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hosted by the exploiter. Once that is accomplished, the exploiter is able to execute commands against the cluster's Kubernetes API with the permissions and identity of the victim.
GHSA
Rancher Vulnerable to Cross-site Request Forgery (CSRF)
ghsa·2021-05-18
CVE-2019-13209 [HIGH] CWE-352 Rancher Vulnerable to Cross-site Request Forgery (CSRF)
Rancher Vulnerable to Cross-site Request Forgery (CSRF)
Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hosted by the exploiter. Once that is accomplished, the exploiter is able to execute commands against the cluster's Kubernetes API with the permissions and identity of the victim.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-09-04
Published