Aller au contenu
en Se connecter
7.9 Élevée

CVE-2026-104615 A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before…

Description

A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.14.12, 0.15.0 up t o 0.15.17 and 0.16.0 up to 0.16.3. The cluster identity claimed by a registration request was accepted without being bound to the registration token that the request was made with. As a result, a registration request could be associated with a managed cluster that was originally registered with a different registration token.

Produits et versions touchés

Produit Versions touchées Corrigé en
Rancher 0.16 0.16.0 → < 0.16.3 0.16.3
Rancher 0.15 premières → < 0.15.17 0.15.17
Rancher 0.14 0.14.0 → < 0.14.12 0.14.12
Rancher 0.13 0.13 → < 0.13.17 0.13.17
Rancher 0.12 premières → 0.12 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Rancher

Les 86 CVE de Rancher →
CVE-2026-88811 Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud… 9.1 Critique CVE-2026-88810 A privilege escalation issue was discovered in Rancher Manager's role-based access control 7.2 Élevée CVE-2026-88809 A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy) 7.6 Élevée CVE-2026-94290 SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent… 9.1 Critique
Suivre cette CVE