All vulnerabilities

Servers and applications

CVE-2024-22030

Rancher agents can be hijacked by taking over the Rancher Server URL

Severity
High 8.0
Published
26 Sept 2024
Last changed
26 Sept 2024
Added to UpHeron
3 Nov 2026
Fixed in
2.7.15, 2.8.8, 2.9.2
Also known as
GHSA-h4h5-9833-v2p4
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
RancherServers and applications · github:rancher/rancher
  • From 2.7.0 before 2.7.15
  • From 2.8.0 before 2.8.8
  • From 2.9.0 before 2.9.2

References