Security Advisory

CVE-2025-23389

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-11 10:46:43

Last updated 2026-02-26 18:28:27

Assigner suse

CVSS score 8.4

State PUBLISHED

Description

A Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML Authentication on first login. This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.

← Browse all CVEs View on cve.org ↗