CVE-2019-12303

Name of the Vulnerable Software and Affected Versions Rancher versions 2 through 2.2.3

Description The issue allows project owners to inject additional fluentd configuration, enabling them to read files or execute arbitrary commands inside the fluentd container. This is related to code injection via fluentd config commands.

Recommendations For versions 2 through 2.2.3, consider restricting access to the fluentd configuration to prevent code injection attacks until a patch is available.