CVE-2024-58267 - Vulnerability Details - OpenCVE

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58267
https://github.com/rancher/rancher/security/advisories/GHSA-v3vj-5868-2ch2

History

Thu, 02 Oct 2025 12:15:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens.
Title		Rancher CLI SAML authentication is vulnerable to phishing attacks
Weaknesses		CWE-345
References		https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58267 https://github.com/rancher/rancher/security/advisories/GHSA-v3vj-5868-2ch2
Metrics		cvssV3_1 `{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: suse

Published: 2025-10-02T12:08:30.507Z

Updated: 2025-10-02T15:52:45.906Z

Reserved: 2025-09-04T04:04:22.186Z

Link: CVE-2024-58267

Vulnrichment

No data.

NVD

Status : Received

Published: 2025-10-02T12:15:28.773

Modified: 2025-10-02T12:15:28.773

Link: CVE-2024-58267

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-58267", "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "state": "PUBLISHED", "assignerShortName": "suse", "dateReserved": "2025-09-04T04:04:22.186Z", "datePublished": "2025-10-02T12:08:30.507Z", "dateUpdated": "2025-10-02T15:52:45.906Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "github.com/rancher/rancher", "product": "rancher", "vendor": "SUSE", "versions": [{"lessThan": "2.12.2", "status": "affected", "version": "2.12.0", "versionType": "semver"}, {"lessThan": "2.11.6", "status": "affected", "version": "2.11.0", "versionType": "semver"}, {"lessThan": "2.10.10", "status": "affected", "version": "2.10.0", "versionType": "semver"}, {"lessThan": "2.9.12", "status": "affected", "version": "2.9.0", "versionType": "semver"}]}], "datePublic": "2025-09-26T11:02:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher\u2019s authentication tokens."}], "value": "A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher\u2019s authentication tokens."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-345", "description": "CWE-345: Insufficient Verification of Data Authenticity", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2025-10-02T12:08:30.507Z"}, "references": [{"url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-58267"}, {"url": "https://github.com/rancher/rancher/security/advisories/GHSA-v3vj-5868-2ch2"}], "source": {"discovery": "UNKNOWN"}, "title": "Rancher CLI SAML authentication is vulnerable to phishing attacks", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-02T15:16:01.181711Z", "id": "CVE-2024-58267", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-02T15:52:45.906Z"}}]}}