Description (CNA)
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / Rancher | affected 9.0.0 before 9.0.1; affected 8.0.0 before 8.1.2; affected 7.0.0 before 7.0.5; affected 6.0.0 before 6.0.3 |
CWE
CWE-532
References
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62879
- https://github.com/advisories/GHSA-wj3p-5h3x-c74q
ADP enrichment
No English description supplied.
No references supplied.