Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-52284

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

Unauthorized disclosure of sensitive data: Any user with `GET` or `LIST` permissions on `BundleDeployment` resources could retrieve Helm values containing credentials or other secrets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Rancher

Default version status: unaffected

  • 0.13.0 to < 0.13.1-0.20250806151509-088bcbea7edbaffected
  • 0.12.0 to < 0.12.6affected
  • 0.11.0 to < 0.11.10affected

References