Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45421
HistoryFeb 09, 2024 - 7:34 a.m.

Sensitive Information Disclosure

2024-02-0907:34:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
rancher
software vulnerability
sensitive information
exposure
http headers
credentials
api calls
audit logs
attacker access

AI Score

6.8

Confidence

Low

github.com/rancher/rancher is vulnerable to Sensitive Information Disclosure. This vulnerability arises due to the exposure of various sensitive data, including HTTP headers, credentials, and API Server calls, leaked into Rancher’s audit logs when AUDIT_LEVEL is set to 1 or above. An attacker can gain access to sensitive information if they gain access to the logs. O

AI Score

6.8

Confidence

Low

Related for VERACODE:45421