CVE-2024-58269

Published: Oct 29, 2025Modified: Jun 17, 2026Deferred

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: meissner@suse.de (Secondary)

Description

A vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity with access to Rancher audit logs.

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58269

Source: meissner@suse.de

https://github.com/rancher/rancher/security/advisories/GHSA-mw39-9qc2-f7mg

Source: meissner@suse.de

Timeline

No history available yet.