CVE-2019-11881

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-11881
A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit phishing sites with scare tactics, e.g., displaying a "This version of Rancher is outdated, please visit https://malicious.rancher.site/upgrading" message.

4.7 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://github.com/MauroEldritch/VanCleef Third Party Advisory
https://github.com/MauroEldritch/VanCleef Third Party Advisory
https://github.com/rancher/rancher/blob/v2.2.4/pkg/auth/providers/saml/saml_client.go#L282
https://github.com/rancher/rancher/commit/e59adbc7565251919d84d6e353421104be8da06e
https://github.com/rancher/rancher/issues/20216 Exploit Issue Tracking Third Party Advisory
https://github.com/rancher/rancher/issues/20216 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:suse:rancher:2.1.4:*:*:*:*:*:*:*
History

04 Dec 2024, 15:15

Type Values Removed Values Added
References
  • () https://github.com/rancher/rancher/commit/e59adbc7565251919d84d6e353421104be8da06e -
  • () https://github.com/rancher/rancher/blob/v2.2.4/pkg/auth/providers/saml/saml_client.go#L282 -
References (MISC) https://github.com/MauroEldritch/VanCleef - Third Party Advisory () https://github.com/MauroEldritch/VanCleef - Third Party Advisory
References (CONFIRM) https://github.com/rancher/rancher/issues/20216 - Issue Tracking, Exploit, Third Party Advisory () https://github.com/rancher/rancher/issues/20216 - Exploit, Issue Tracking, Third Party Advisory
Summary A vulnerability exists in Rancher 2.1.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit phishing sites with scare tactics, e.g., displaying a "This version of Rancher is outdated, please visit https://malicious.rancher.site/upgrading" message. A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit phishing sites with scare tactics, e.g., displaying a "This version of Rancher is outdated, please visit https://malicious.rancher.site/upgrading" message.
Information

Published : 2019-06-10 20:29

Updated : 2024-12-04 15:15

NVD link : CVE-2019-11881

Mitre link : CVE-2019-11881

JSON object : View

Products Affected

suse

  • rancher
CWE
NVD-CWE-noinfo