CVE-2022-21947 – rancher desktop: Dashboard API is network accessible

https://notcve.org/view.php?id=CVE-2022-21947

01 Apr 2022 — A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V. Una vulnerabilidad de control de acceso inapropiado en Rancher Desktop de SUSE permite a atacantes de la red local conectarse a la API de Dashboard (steve) para llevar a cabo acciones arbitrarias. Este problema afecta a: SUSE Rancher Desktop versiones anterior... • https://bugzilla.suse.com/show_bug.cgi?id=1197491 • CWE-668: Exposure of Resource to Wrong Sphere •