Description
A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to continue abusing this even after the token was renewed. This issue affects: SUSE Rancher Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Rancher | Rancher – < 2.6.10 | 2.6.10 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | >= 2.6.0, < 2.6.10 | 2.6.10 | GHSA-8c69-r38j-rpfj |
| Go | github.com/rancher/rancher | >= 2.7.0, < 2.7.1 | 2.7.1 | GHSA-8c69-r38j-rpfj |
Advisories 1
- WID-SEC-2023-0197 Rancher: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 24, 2023