CVE-2026-44947:详情

CVE-2026-44947

2026-06-30
15h16 +00:00
2026-10-25
21h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those permissions from a RoleTemplate.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-281 Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

参考资料