cve.bz

CVE-2024-52280

7.7 highEPSS 0.5%

High (7.7). EPSS 0.5% chance of exploitation in the next 30 days. Fixed in github.com/rancher/steve 0.0.0-20241029132712-2175e090fe4b.

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to watch resources they are not allowed to access, when they have at least some generic permissions on the type. This issue affects rancher: before 2175e09, before 6e30359, before c744f0b.

Severity

CVSS 3.1

7.7 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-11-01)
CWE
CWE-200
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-j5hq-5jcr-xwx7Gogithub.com/rancher/steve<0.0.0-20241029132712-2175e090fe4b0.0.0-20241029132712-2175e090fe4b
GO-2024-3281Gogithub.com/rancher/steve<0.0.0-20241029132712-2175e090fe4b0.0.0-20241029132712-2175e090fe4b

References

Check your stackJSON