Sensitive Information Exposure in SUSE Rancher Manager Apps Catalog
CVE-2024-52282

6.2MEDIUM

Key Information:

Vendor
Suse
Status
Rancher
Vendor
CVE Published:
11 April 2025

Summary

A vulnerable component in SUSE Rancher's Apps Catalog enables users with READ access to obtain sensitive information that should be restricted. This exposure occurs when the audit level is set at level 2 or higher, resulting in sensitive data leaking into audit logs. The vulnerability persists across multiple versions of Rancher, specifically from 2.8.0 before 2.8.10 and from 2.9.0 before 2.9.4.

Affected Version(s)

rancher 2.8.0 < 2.8.10

rancher 2.9.0 < 2.9.4

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-52282
https://github.com/rancher/rancher/security/advisories/GH...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.