https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:43:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-253959 EUVD-2026-253959 https://cve.radiocsirt.org/vuln/euvd-2026-253959 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54468 <p>A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses.</p> <p>A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-54468 https://cve.radiocsirt.org/vuln/ghsa-mjcp-rj3c-36fr <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact</p> <p>A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses.</p> <p>If the authentication provider is configured to have email or other sensitive and/or identifiable information as part of the username and principal ID then when a new cloud credential is being created in Rancher Manager this information is sent to an external entity such as `amazonaws.com`, in case of an AWS cloud credentials, in `Impersonate-Extra-Username` and/or `Impersonate-Extra-Principalid` headers. Please note that neither password, password hashes or Rancher’s related authentication tokens are leaked in those requests.</p> <p>The entities to which such information is sent to are limited by the whitelisted domains specified in `nodedrivers.management.cattle.io` objects.</p> <p>For example, the Amazon EC2 node driver contains the following whitelisted domains:</p> <p>- `iam.amazonaws.com` - `iam.us-gov.amazonaws.com` - `iam.%.amazonaws.com.cn` - `iam.global.api.aws` - `ec2.%.amazonaws.com` - `ec2.%.amazonaws.com.cn` - `ec2.%.api.aws` - `eks.%.amazonaws.com` - `eks.%.amazonaws.com.cn` - `eks.%.api.aws` - `kms.%.amazonaws.com` - `kms.%.amazonaws.com.cn` - `kms.%.api.aws`</p> <p>While the DigitalOcean driver contains the following whitelisted domain:</p> <p>- `api.digitalocean.com`</p> <p>### Patches</p> <p>Thi…</p> <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact</p> <p>A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses.</p> <p>If the authentication provider is configured to have email or other sensitive and/or identifiable information as part of the username and principal ID then when a new cloud credential is being created in Rancher Manager this information is sent to an external entity such as `amazonaws.com`, in case of an AWS cloud credentials, in `Impersonate-Extra-Username` and/or `Impersonate-Extra-Principalid` headers. Please note that neither password, password hashes or Rancher’s related authentication tokens are leaked in those requests.</p> <p>The entities to which such information is sent to are limited by the whitelisted domains specified in `nodedrivers.management.cattle.io` objects.</p> <p>For example, the Amazon EC2 node driver contains the following whitelisted domains:</p> <p>- `iam.amazonaws.com` - `iam.us-gov.amazonaws.com` - `iam.%.amazonaws.com.cn` - `iam.global.api.aws` - `ec2.%.amazonaws.com` - `ec2.%.amazonaws.com.cn` - `ec2.%.api.aws` - `eks.%.amazonaws.com` - `eks.%.amazonaws.com.cn` - `eks.%.api.aws` - `kms.%.amazonaws.com` - `kms.%.amazonaws.com.cn` - `kms.%.api.aws`</p> <p>While the DigitalOcean driver contains the following whitelisted domain:</p> <p>- `api.digitalocean.com`</p> <p>### Patches</p> <p>Thi…</p> https://cve.radiocsirt.org/vuln/ghsa-mjcp-rj3c-36fr https://cve.radiocsirt.org/vuln/opensuse-su-2025:15666-1 <p>govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15666-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2141 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service herbeizuführen und Informationen auszuspähen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service herbeizuführen und Informationen auszuspähen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2141