CVE-2024-58269

Upstream information

CVE-2024-58269 at MITRE

Description

A vulnerability has been identified in Rancher Manager, where sensitive
information, including secret data, cluster import URLs, and
registration tokens, is exposed to any entity with access to Rancher
audit logs.

---

Upstream Security Advisories:

• https://github.com/rancher/rancher/security/advisories/GHSA-mw39-9qc2-f7mg

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v3 Scores

CVSS detail	CNA (SUSE)
Base Score	4.3
Vector	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality Impact	Low
Integrity Impact	None
Availability Impact	None
CVSSv3 Version	3.1

SUSE Bugzilla entry: 1251532 [RESOLVED / FIXED]

SUSE Security Advisories:

• GHSA-mw39-9qc2-f7mg, published Fri Oct 24 02:59:04 CEST 2025

List of released packages

Product(s)	Fixed package version(s)	References
openSUSE Tumbleweed	govulncheck-vulndb >= 0.0.20251105T184115-1.1	Patchnames: openSUSE-Tumbleweed-2025-15710

---

SUSE Timeline for this CVE

CVE page created: Wed Oct 8 16:00:51 2025
CVE page last modified: Wed Nov 19 19:24:21 2025