Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-52280

Users can issue watch commands for arbitrary resources

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to watch resources they are not allowed to access, when they have at least some generic permissions on the type. This issue affects rancher: before 2175e09, before 6e30359, before c744f0b.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE rancher

Default version status: unaffected

  • 0 to < 2175e09affected
  • 0 to < 6e30359affected
  • 0 to < c744f0baffected

References