CVE-2021-4200: 
Rancher vulnerability analysis and mitigation

A vulnerability identified as CVE-2021-4200 was discovered in SUSE Rancher that allows write access to the Catalog for any user when the restricted-admin role is enabled. This Improper Privilege Management vulnerability affects SUSE Rancher versions prior to 2.5.13 and Rancher versions prior to 2.6.4 (MITRE CVE).

The vulnerability is classified as an Improper Privilege Management issue that occurs when the restricted-admin role is enabled in SUSE Rancher. The security flaw allows unauthorized write access to the Catalog functionality, potentially compromising the system's security controls (SUSE Bugzilla).

When exploited, this vulnerability allows any user to gain write access to the Catalog when the restricted-admin role is enabled, potentially compromising the security and integrity of the Rancher deployment (MITRE CVE).

The vulnerability requires the restricted-admin role to be enabled in the SUSE Rancher environment. The issue was discovered and reported through SUSE's security incident process and was assigned a severity rating of Critical (SUSE Bugzilla).

The vulnerability has been addressed in SUSE Rancher versions 2.5.13 and 2.6.4. Users are advised to upgrade to these or later versions to mitigate the security risk (MITRE CVE).