CVE-2024-52282CWE-200

Rancher Helm Applications may have sensitive values leaked

Medium · published April 11, 2025

CVSS v3.1
6.2
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with GET

access to the Rancher Manager Apps Catalog to read any sensitive information that are

contained within the Apps’ values. Additionally, the same information

leaks into auditing logs when the audit level is set to equal or above

2.

This issue affects rancher: from 2.8.0 before 2.8.10, from 2.9.0 before 2.9.4.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00452 · 38.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-04-11T10:57Z
EPSS history
Timeline
  • 11 APR 10:57Z
    Rancher Helm Applications may have sensitive values leaked
    cvelistv5