Approved changes feed: RSS · Atom

cpe:2.3:a:suse:rancher:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductRancher (b14d5157-670d-5ba1-a13d-1229b122b425)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/rancher/rancher purl2cpe 2026-06-01 10:12:20.035847
pkg:github/rancher/rancher purl2cpe 2026-06-01 10:12:20.035848
pkg:sourceforge/rancher.mirror purl2cpe 2026-06-01 10:12:20.035850

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22030 vulnerable 2026-06-08 06:29:33.393344 Rancher agents can be hijacked by taking over the Rancher Server URL
HIGH (8)
A vulnerability has been identified within Rancher that can be exploited in narrow circumstances through a man-in-the-middle (MITM) attack. An attacker would need to have control of an expired domain or execute a DNS spoofing/hijacking attack against the domain to exploit this vulnerability. The targeted domain is the one used as the Rancher URL.
Published: 2024-10-16T13:24:06.944Z
Updated: 2024-10-16T14:25:43.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22650 vulnerable 2026-06-08 05:54:26.688629 Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider
HIGH (8.8)
A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from the configured authentication provider (AP). This characteristic also applies to disabled or revoked users, Rancher will not reflect these modifications which may leave the user’s tokens still usable.
Published: 2024-10-16T08:20:42.467Z
Updated: 2024-10-16T14:44:01.636Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.