Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: SUSE rancher 2.10.10, 2.11.6 and 2 more versions Clear all filters
TI-2024-38361 CVE-2024-58260 · GHSA-q82v-h4rq-5c86

Rancher update on users can deny the service to the admin

Priority LOW 34

A vulnerability has been identified within Rancher Manager where a missing server-side validation on the `.username` field in Rancher can allow users with update permissions on other User resources to cause denial of acc…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00458 Published 2025-10-02 Fixed in 2.12.2, 2.11.6 +2 CWE-863
TI-2024-38368 CVE-2024-58267 · GHSA-v3vj-5868-2ch2

Rancher CLI SAML authentication is vulnerable to phishing attacks

Priority LOW 36

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00239 Published 2025-10-02 Fixed in 2.12.2, 2.11.6 +2 CWE-345