A vulnerability has been identified which may lead to sensitive data being leaked into Ranchers audit logs. Rancher Audit Logging is an opt-in feature, only deployments that have it enabled and have AUDIT_LEVEL set to 1 or above are impacted by this issue.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rancher | Suse | 2.6.0 (including) | 2.6.14 (excluding) |
| Rancher | Suse | 2.7.0 (including) | 2.7.10 (excluding) |
| Rancher | Suse | 2.8.0 (including) | 2.8.2 (excluding) |