---
cve: "CVE-2023-22647"
severity: "CRITICAL"
cvss: 9.9
epss: "72%"
vendor: "SUSE"
kev: false
exploited: false
published: "2023-06-01 13:15:10"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-09-03T11:03:21+02:00"
---

# CVE-2023-22647

> 9.9 CRITICAL · 🧪 PoC

## Beschreibung

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local
 cluster, resulting in the secret being deleted, but their read-level 
permissions to the secret being preserved. When this operation was 
followed-up by other specially crafted commands, it could result in the 
user gaining access to tokens belonging to service accounts in the local cluster.


This issue affects Rancher: from >= 2.6.0 before < 2.6.13, from >= 2.7.0 before < 2.7.4.

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Patch verfügbar (OSV)

- e91bb053386b32864bbbb306f39061e9f2e287ae (Commit)
- efc731b553111e5083ee6fb21587491f7e4fcdc9 (Commit)

## Referenzen

- <https://github.com/rancher/rancher/security/advisories/GHSA-p976-h52c-26p6>
- <https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22647>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2023-22647) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_