« Volver al listado

CVE-2024-58269

Estado: AplazadaMedia (4.3)—

A vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity with access to Rancher audit logs.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Rancher — ManagerAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-58269",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-58269",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-10-29T15:09:03.657329Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "meissner@suse.de",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "meissner@suse.de",
      "affectedData": [
        {
          "vendor": "SUSE",
          "product": "rancher",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "0.0.0-20251013203444-50dc516a19ea",
              "versionType": "semver"
            }
          ],
          "packageName": "github.com/rancher/rancher",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-10-29T15:15:41.077",
  "references": [
    {
      "url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58269",
      "source": "meissner@suse.de"
    },
    {
      "url": "https://github.com/rancher/rancher/security/advisories/GHSA-mw39-9qc2-f7mg",
      "source": "meissner@suse.de"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "meissner@suse.de",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in Rancher Manager, where sensitive \ninformation, including secret data, cluster import URLs, and \nregistration tokens, is exposed to any entity with access to Rancher \naudit logs."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad ha sido identificada en Rancher Manager, donde información sensible, incluyendo datos secretos, URL de importación de clústeres y tokens de registro, está expuesta a cualquier entidad con acceso a los registros de auditoría de Rancher."
    }
  ],
  "lastModified": "2026-10-02T00:10:00.180",
  "sourceIdentifier": "meissner@suse.de"
}