GO-2024-3281

vendorUSosv

github.com/rancher/steve's users can issue watch commands for arbitrary resources in github.com/rancher/steve

view advisory published 2024-11-21Licence: per source

github.com/rancher/steve's users can issue watch commands for arbitrary resources in github.com/rancher/steve

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-52280US——
A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to watch resources they are not allowed to access, when they have at…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan