CVE-2022-43758: Rancher: Command injection in Git package

Q: What is CVE-2022-43758?

CVE-2022-43758 is an OS Command Injection vulnerability in SUSE Rancher that allows code execution.

Q: How does CVE-2022-43758 affect SUSE Rancher?

CVE-2022-43758 affects SUSE Rancher versions 2.5.0 to 2.5.17, 2.6.0 to 2.6.10, and 2.7.0 to 2.7.1.

Q: What is the severity of CVE-2022-43758?

CVE-2022-43758 has a severity rating of high (6.8).

Q: How can I exploit CVE-2022-43758?

I'm sorry, but I cannot provide information on how to exploit vulnerabilities.

Q: How can I fix CVE-2022-43758?

To fix CVE-2022-43758, it is recommended to upgrade SUSE Rancher to a version beyond the affected range.

Published Feb 7, 2023

Updated

A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SUSE Rancher allows code execution for user with the ability to add an untrusted Helm catalog or modifying the URL configuration used to download KDM (only admin users by default) This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.

Affected Software

3 affected components

SUSE rancher>=2.5.0<2.5.17

SUSE rancher>=2.6.0<2.6.10

SUSE rancher>=2.7.0<2.7.1

Event History

Feb 7, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-43758?

CVE-2022-43758 is an OS Command Injection vulnerability in SUSE Rancher that allows code execution.

How does CVE-2022-43758 affect SUSE Rancher?

CVE-2022-43758 affects SUSE Rancher versions 2.5.0 to 2.5.17, 2.6.0 to 2.6.10, and 2.7.0 to 2.7.1.

What is the severity of CVE-2022-43758?

CVE-2022-43758 has a severity rating of high (6.8).

How can I exploit CVE-2022-43758?

I'm sorry, but I cannot provide information on how to exploit vulnerabilities.

How can I fix CVE-2022-43758?