CWE Code: 668
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Exposure of Resource to Wrong Sphere
Summary: an issue was discovered in rancher 2 through 2.1.5. any project member with access to the default namespace can mount the netes-default service account in a pod, and then use that pod to execute administrative privileged commands against the k8s cluster. this could be mitigated by isolating the default namespace in a separate project, where only cluster admins can be given permissions to access. as of 2018-12-20, this bug affected all clusters created or imported by rancher.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-04-10
Last Modified Date: 2019-10-03