CVE-2023-22651

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into the Kubernetes cluster. The issue only affects users that upgrade from 2.6.x or 2.7.x to 2.7.2. Users that did a fresh install of 2.7.2 (and did not follow an upgrade path) are not affected.

• CWE-269
• CWE-276

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22651Issue Tracking, Vendor Advisory
• https://github.com/rancher/rancher/security/advisories/GHSA-6m9f-pj6w-w87gMitigation, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22651Issue Tracking, Vendor Advisory
• https://github.com/rancher/rancher/security/advisories/GHSA-6m9f-pj6w-w87gMitigation, Third Party Advisory

Published

May 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22645An Improper Privilege Management vulnerability in SUSE kubew…8.8
• CVE-2023-22647An Improper Privilege Management vulnerability in SUSE Ranch…8
• CVE-2023-22648A Improper Privilege Management vulnerability in SUSE Ranche…8.8
• CVE-2023-22649A vulnerability has been identified which may lead to sensit…6.5
• CVE-2023-2265An Improper Restriction of Rendered UI Layers or Frames in t…6.1
• CVE-2023-22650A vulnerability has been identified in which Rancher does no…8.8
• CVE-2023-22652A Buffer Copy without Checking Size of Input ('Classic Buffe…6.5
• CVE-2023-22653An OS command injection vulnerability exists in the vtysh_ub…8.8
• CVE-2023-22654Client-side enforcement of server-side security issue exists…5.4
• CVE-2023-22655Protection mechanism failure in some 3rd and 4th Generation …6.1
• CVE-2023-22656Out-of-bounds read in Intel(R) Media SDK and some Intel(R) o…3.9
• CVE-2023-22657On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5O…7.8