BaseFortify

Publication date: 2025-10-29

Last updated on: 2025-10-30

Assigner: SUSE

Description

A vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity with access to Rancher audit logs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-29

Last Modified

2025-10-30

Generated

2026-07-06

AI Q&A

2025-10-29

EPSS Evaluated

2026-07-05

NVD

CVE-2024-58269

Affected Vendors & Products

Vendor	Product	Version / Range
rancher	rancher	*
rancher	rancher	2.12.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Executive Summary

This vulnerability in Rancher Manager exposes sensitive information such as secret data, cluster import URLs, and registration tokens to any entity that has access to Rancher audit logs.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive information, which may allow attackers or unauthorized users to gain access to critical system components or perform unauthorized actions using the exposed secrets and tokens.

Hi! I’m here to help you understand CVE-2024-58269. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70