A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Audit Logging](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-api-audit-log) is an opt-in feature, only deployments that have it enabled and have [AUDIT_LEVEL](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-api-audit-log#audit-log-levels) set to `1 or above` are impacted by this issue.
References
| Link | Resource |
|---|---|
| https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22649 | Issue Tracking |
| https://github.com/rancher/rancher/security/advisories/GHSA-xfj7-qf8w-2gcr | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
30 Oct 2024, 21:08
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CPE | cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:undefined cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:* |
|
| First Time |
Suse rancher
Suse |
|
| References | () https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22649 - Issue Tracking | |
| References | () https://github.com/rancher/rancher/security/advisories/GHSA-xfj7-qf8w-2gcr - Mitigation, Vendor Advisory |
16 Oct 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-16 08:15
Updated : 2024-10-30 21:08
NVD link : CVE-2023-22649
Mitre link : CVE-2023-22649
JSON object : View
Products Affected
suse
- rancher
CWE
CWE-532
Insertion of Sensitive Information into Log File