CVE-2024-58269
Fixed in a distro release EPSS <1%CVSS 4.3
A vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity with access to Rancher audit logs.
Products: SUSE Rancher
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/rancher/rancher | 0.0.0-20251013203444-50dc516a19ea |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | harvester | no fix |
| Chainguard | harvester-fips | no fix |
| Chainguard | harvester-fips-webhook | no fix |
| Chainguard | harvester-webhook | no fix |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20251105T184115-1.1 |