Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: SUSE rancher 2.10.3, 2.8.13, 2.9.7 Clear all filters
TI-2025-17156 CVE-2025-23387 · GHSA-5qmp-9x47-92q8

Rancher's SAML-based login via CLI can be denied by unauthenticated users

Priority LOW 31

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users to list all CLI authentication tokens and delete them before the CLI is able to get the token value…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00603 Published 2025-04-11 Fixed in 2.8.13, 2.9.7 +1 CWE-200
TI-2025-17157 CVE-2025-23388 · GHSA-xr9q-h9c7-xw8q

Unauthenticated stack overflow in /v3-public/authproviders API

Priority MEDIUM 43

A Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00615 Published 2025-04-11 Fixed in 2.8.13, 2.9.7 +1 CWE-121