Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

rancher

A vulnerability has been identified within Rancher 
Manager, where after removing a custom GlobalRole that gives 
administrative access or the corresponding binding, the user still 
retains access to clusters. This only affects custom Global Roles that have a * on * in * rule for resources or have a * on * rule for non-resource URLs

CVE-2023-32199 identifies a vulnerability in SUSE Rancher Manager related to improper permission handling, specifically improper preservation of permissions after removal of custom GlobalRoles. Rancher Manager uses GlobalRoles to define administrative access scopes across Kubernetes clusters. The vulnerability arises when a custom GlobalRole that grants administrative privileges—particularly those with wildcard '*' rules on resources or non-resource URLs—is deleted or its binding removed. Despite this removal, affected users retain cluster access, indicating that the system fails to revoke permissions correctly. This is categorized under CWE-281, which concerns improper preservation of permissions. The CVSS 3.1 score is 4.3 (medium severity), with attack vector network (AV:N), low attack complexity (AC:L), requiring high privileges (PR:H) and user interaction (UI:R). The impact includes limited confidentiality, integrity, and availability loss due to lingering elevated access. No public exploits are currently known, and no patches have been linked yet. This vulnerability affects Rancher versions identified as '0' in the data, likely meaning initial or unspecified versions, so organizations should verify their specific versions. The flaw could allow an attacker or insider with previously assigned roles to maintain unauthorized cluster control even after role revocation, undermining access control policies and potentially enabling unauthorized configuration changes or data exposure within Kubernetes clusters managed by Rancher.

Detailed information about CVE-2023-32199: CWE-281: Improper Preservation of Permissions in SUSE rancher affecting SUSE rancher. Get real-time updates, technica

CVE-2023-32199: CWE-281: Improper Preservation of Permissions in SUSE rancher - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-32199: CWE-281: Improper Preservation of Permissions in SUSE rancher

Threats Tagged 'cve-2023-32199'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-32199'

Lead Pen Test Professional