CVE-2022-21947

HIGH 8.8CVE-2022-21947 · Published 01/04/2022 · updated 17/06/2026

In short

CVE-2022-21947 is a HIGH (CVSS 8.8) vulnerability affecting rancher desktop (suse).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.2% of all vulnerabilities.
Fix: update to 1.2.1 or later.

Package	Affected versions	Patched versions
rancher desktop suse	`< 1.2.1`	`1.2.1`

Description

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

References

bugzilla.suse.com/show_bug.cgi · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free