CVE-2025-23389

CWE-284 — Improper Access ControlCWE-287 — Improper Authentication5 documents4 sources
Severity
8.4HIGH
EPSS
0.2%
top 61.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Suse RancherGithub.com Rancher/rancher
Timeline
PublishedApr 11

Description

A Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML Authentication on first login. This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:LExploitability: 1.8 | Impact: 6.0

Affected Packages2 packages

▶CVEListV5suse/rancher2.8.0 — 2.8.13+2
▶Gogithub.com/rancher/rancher2.8.0 — 2.8.13+2

🔴Vulnerability Details

4
CVEList
Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login↗2025-04-11
▶
OSV
Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login in github.com/rancher/rancher↗2025-03-03
▶
OSV
Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login↗2025-02-27
▶
GHSA
Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login↗2025-02-27
▶
CVE-2025-23389 (HIGH CVSS 8.4) | A Improper Access Control vulnerabi | cvebase.io