Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2024-58267

Rancher CLI SAML authentication is vulnerable to phishing attacks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE rancher

Default version status: unaffected

  • 2.12.0 to < 2.12.2affected
  • 2.11.0 to < 2.11.6affected
  • 2.10.0 to < 2.10.10affected
  • 2.9.0 to < 2.9.12affected

References