7.7
Élevée
CVE-2024-52280 A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to…
Description
A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to watch resources they are not allowed to access, when they have at least some generic permissions on the type. This issue affects rancher: before 2175e09, before 6e30359, before c744f0b.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rancher | Versions non publiées |
Autres CVE de Rancher
Les 86 CVE de Rancher →
CVE-2026-88811
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud…
9.1
Critique
CVE-2026-88810
A privilege escalation issue was discovered in Rancher Manager's role-based access control
7.2
Élevée
CVE-2026-88809
A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy)
7.6
Élevée
CVE-2026-94290
SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent…
9.1
Critique