CVE-2022-43759: 
Rancher vulnerability analysis and mitigation

A high-severity Improper Privilege Management vulnerability (CVE-2022-43759) was discovered in SUSE Rancher that allows users with access to the escalate verb on PRTBs to escalate permissions for any promoted resource in any cluster. The vulnerability affects SUSE Rancher versions prior to 2.5.17 and versions prior to 2.6.10 (NVD).

The vulnerability is classified under CWE-269 (Improper Privilege Management) with a CVSS v3.1 score of 8.8 HIGH. The issue specifically relates to the privilege management mechanism in Rancher, where users with specific access to the escalate verb on PRTBs could exploit the vulnerability to gain elevated permissions across promoted resources in any cluster (NVD, FortiGuard).

The vulnerability allows unauthorized privilege escalation across clusters, potentially giving attackers broader access to resources than intended. This could lead to unauthorized access to sensitive resources and compromise the security of the Kubernetes clusters managed by Rancher (NVD).

Users are advised to upgrade to Rancher version 2.5.17 or 2.6.10 or later, depending on their current version track. These versions contain the necessary security fixes to address the vulnerability (FortiGuard).