CVE-2017-7297: Suse Rancher

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3, and rancher/server:v1.5.3.

Affected products

• Suse Rancher: from 1.2.0, before 1.2.4 (fixed in 1.2.4); from 1.3.0, before 1.3.5 (fixed in 1.3.5); from 1.4.0, before 1.4.3 (fixed in 1.4.3); from 1.5.0, before 1.5.3 (fixed in 1.5.3)

Published 2017-03-29. Last modified 2026-06-17.