CVE-2024-58269
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-10-29
Last updated on: 2025-10-30
Assigner: SUSE
Description
Description
A vulnerability has been identified in Rancher Manager, where sensitive
information, including secret data, cluster import URLs, and
registration tokens, is exposed to any entity with access to Rancher
audit logs.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| rancher | rancher | * |
| rancher | rancher | 2.12.3 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-532 | The product writes sensitive information to a log file. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Rancher Manager exposes sensitive information such as secret data, cluster import URLs, and registration tokens to any entity that has access to Rancher audit logs.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized disclosure of sensitive information, which may allow attackers or unauthorized users to gain access to critical system components or perform unauthorized actions using the exposed secrets and tokens.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70