SUSE Rancher up to 2.9.11/2.10.9/2.11.5/2.12.1 CLI Tool data authenticity

Summaryinfo

A vulnerability, which was classified as problematic, has been found in SUSE Rancher up to 2.9.11/2.10.9/2.11.5/2.12.1. Affected by this vulnerability is an unknown functionality of the component CLI Tool. Performing a manipulation results in data authenticity. This vulnerability was named CVE-2024-58267. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in SUSE Rancher up to 2.9.11/2.10.9/2.11.5/2.12.1. It has been classified as problematic. This affects an unknown functionality of the component CLI Tool. The manipulation with an unknown input leads to a data authenticity vulnerability. CWE is classifying the issue as CWE-345. The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data. This is going to have an impact on confidentiality. The summary by CVE is:

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens.

The advisory is shared at bugzilla.suse.com. This vulnerability is uniquely identified as CVE-2024-58267 since 09/04/2025. The exploitability is told to be difficult. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/03/2025).

Upgrading to version 2.9.12, 2.10.10, 2.11.6 or 2.12.2 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-31336). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• SUSE

Name

• Rancher

Version

• 2.9.0
• 2.9.1
• 2.9.2
• 2.9.3
• 2.9.4
• 2.9.5
• 2.9.6
• 2.9.7
• 2.9.8
• 2.9.9
• 2.9.10
• 2.9.11
• 2.10.0
• 2.10.1
• 2.10.2
• 2.10.3
• 2.10.4
• 2.10.5
• 2.10.6
• 2.10.7
• 2.10.8
• 2.10.9
• 2.11.0
• 2.11.1
• 2.11.2
• 2.11.3
• 2.11.4
• 2.11.5
• 2.12.0
• 2.12.1

License

• open-source

Website

• Vendor: https://www.suse.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion