6.2
Moyenne
CVE-2024-52282 A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with…
Description
A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with GET access to the Rancher Manager Apps Catalog to read any sensitive information that are contained within the Apps’ values. Additionally, the same information leaks into auditing logs when the audit level is set to equal or above 2. This issue affects rancher: from 2.8.0 before 2.8.10, from 2.9.0 before 2.9.4.
Produits et versions touchés
Autres CVE de Rancher
Les 86 CVE de Rancher →
CVE-2026-88811
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud…
9.1
Critique
CVE-2026-88810
A privilege escalation issue was discovered in Rancher Manager's role-based access control
7.2
Élevée
CVE-2026-88809
A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy)
7.6
Élevée
CVE-2026-94290
SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent…
9.1
Critique