Rancher meta proxy allowlist bypass leads to server-side request forgery (SUSE AV26-1113)
Rancher versions prior to 2.11.19, 2.12.15, 2.13.11, 2.14.7 and 2.15.3 are affected by the vulnerability.
Stories per day · 30 days
3 RSS
4 stories, newest first · one card per story
Stories tagged #rancher
SUSE Linux security advisory (AV26-1053)
Canadian Cyber Centre relays SUSE fixes for Rancher project access flaws and Steve certificate-validation weaknesses.
SUSE Linux security advisory (AV26-974)
Canadian Cyber Centre relayed SUSE advisory AV26-974 covering Rancher flaws including stored XSS, session issues, and cross-tenant secret disclosure; patches advised.
SUSE Linux security advisory (AV26-882)
Canadian Centre for Cyber Security flagged SUSE Rancher vulnerabilities fixed in Rancher 2.15.1, urging administrators to apply updates.