Improper Authentication

2024-06-1809:43:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

rancher

vulnerability

improper authentication

user tokens

software

7 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

Rancher is vulnerable to Improper Authentication. The vulnerability is due to not cleaning up a deleted/disabled user, or revoked from the configured authentication provider, leaving the user’s tokens still usable.

CPENameOperatorVersion
github.com/rancher/rancherlev2.8.4
github.com/rancher/rancherlev2.7.13
github.com/rancher/rancherlev2.8.4
github.com/rancher/rancherlev2.7.13