CVE-2024-58269

Summary

A vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity with access to Rancher audit logs.

Affected Software

Weaknesses

• CWE-532: CWE-532: Insertion of Sensitive Information into Log File

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58269
• https://github.com/rancher/rancher/security/advisories/GHSA-mw39-9qc2-f7mg

• ←Previous
• Next→