All vulnerabilities

Servers and applications

GHSA-c45c-39f6-6gw9

Rancher generated tokens not revoked after modifications made to authentication provider

Severity
High 8.8
Published
25 Jan 2023
Last changed
25 Jan 2023
Added to UpHeron
3 Nov 2026
Fixed in
2.5.17, 2.6.10, 2.7.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
RancherServers and applications · github:rancher/rancher
  • From 2.5.0 before 2.5.17
  • From 2.6.0 before 2.6.10
  • From 2.7.0 before 2.7.1

References