Medium severity · published Apr 11, 2025
CVE-2025-23387
Rancher's SAML-based login via CLI can be denied by unauthenticated users
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users to list all CLI authentication tokens and delete them before the CLI is able to get the token value.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
rancher · SUSE
2.8.0 before 2.8.13; 2.9.0 before 2.9.7; 2.10.0 before 2.10.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-23387
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-23387
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23387
github.com
https://github.com/rancher/rancher/security/advisories/GHSA-5qmp-9x47-92q8
More from rancher
9.9
CVE-2026-44935
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
9.9
CVE-2026-41050
Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
9.9
CVE-2025-62878
Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
9.9
CVE-2023-22651
Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation
9.9
CVE-2021-36783
A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials,…