Sensitive Data Exposure in Rancher Manager Affects Users

CVE-2024-58269

What is CVE-2024-58269?

A vulnerability in Rancher Manager has been discovered that allows sensitive information, such as secret data, cluster import URLs, and registration tokens, to be exposed to any entity with access to Rancher audit logs. This could lead to unauthorized access to critical system components, raising significant security concerns for users and organizations relying on Rancher Manager for container management. Users are advised to review their audit log settings and apply necessary mitigations to protect against potential data exposure.

References