{"id":"EUVD-2025-31337","enisaUuid":"0b1fc1ac-d3d6-3b3c-9743-7fcf6d1935ce","description":"A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses.","datePublished":"Oct 2, 2025, 10:00:18 AM","dateUpdated":"Oct 2, 2025, 2:10:23 PM","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","references":"https://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2025-54468\nhttps://github.com/rancher/rancher/security/advisories/GHSA-mjcp-rj3c-36fr\n","aliases":"CVE-2025-54468\nGHSA-mjcp-rj3c-36fr\n","assigner":"suse","epss":0.36,"enisaIdProduct":[{"id":"2b77183f-6152-3be3-9193-5ae46fda643b","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.11.0 \u003c2.11.6"},{"id":"563e6bfa-7efd-31ac-b634-655a2a5026b9","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.9.0 \u003c2.9.12"},{"id":"590075b0-6ef3-3568-a60d-fb41bf5f1921","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.10.0 \u003c2.10.10"},{"id":"d9f11d21-2baf-343a-ad84-a89ce5fa7cdb","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.12.0 \u003c2.12.2"}],"enisaIdVendor":[{"id":"35697725-56e8-3c7d-a7de-4e574459d718","vendor":{"name":"SUSE"}}],"enisaIdVulnerability":[{"id":"b6c39835-54aa-3bed-9f32-5a8716475676","vulnerability":{"id":"CVE-2025-54468","description":"A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses.","datePublished":"Oct 2, 2025, 10:00:18 AM","dateUpdated":"Oct 2, 2025, 2:10:23 PM","status":"PUBLISHED","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","references":"https://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2025-54468\nhttps://github.com/rancher/rancher/security/advisories/GHSA-mjcp-rj3c-36fr\n","enisa_id":"EUVD-2025-31337\n","assigner":"suse","epss":0.36,"dataProcessed":"Nov 2, 2026, 7:14:02 AM","vulnerabilityProduct":[{"id":"69690501-527a-3941-ba11-f50490ab2bfb","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.9.0 \u003c2.9.12"},{"id":"baf006b6-4ab2-3e28-9365-6ec262681275","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.12.0 \u003c2.12.2"},{"id":"cedae76f-24c6-3e9e-905b-394fa9a24728","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.11.0 \u003c2.11.6"},{"id":"ee1747ce-f429-3f05-aa1d-1e2b95246237","product":{"name":"Rancher","vendor":{"name":"SUSE"}},"product_version":"2.10.0 \u003c2.10.10"}],"vulnerabilityVendor":[{"id":"9a2755f1-3ceb-36cf-9ee0-3d994497399a","vendor":{"name":"SUSE"}}]}},{"id":"bb44847e-37d4-3ef9-86e5-33d70f92c143","vulnerability":{"id":"GHSA-mjcp-rj3c-36fr","description":"Rancher sends sensitive information to external services through the `/meta/proxy` endpoint","datePublished":"Sep 26, 2025, 1:02:38 PM","dateUpdated":"Oct 23, 2025, 8:13:44 PM","baseScore":0.0,"references":"https://github.com/rancher/rancher/security/advisories/GHSA-mjcp-rj3c-36fr\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-54468\nhttps://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2025-54468\nhttps://github.com/rancher/rancher\nhttps://pkg.go.dev/vuln/GO-2025-3982\n","enisa_id":"EUVD-2025-31337\n","aliases":"CVE-2025-54468\nGHSA-mjcp-rj3c-36fr\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:55:38 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"7c447d72-29b1-3765-89a3-f38fd3c9c816","advisory":{"id":"openSUSE-SU-2025:15666-1","description":"govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media","datePublished":"Oct 24, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:43:48 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15666-1.json\nhttps://www.suse.com/security/cve/CVE-2024-58260/\nhttps://www.suse.com/security/cve/CVE-2024-58267/\nhttps://www.suse.com/security/cve/CVE-2025-23266/\nhttps://www.suse.com/security/cve/CVE-2025-23267/\nhttps://www.suse.com/security/cve/CVE-2025-54468/\nhttps://www.suse.com/security/cve/CVE-2025-55191/\nhttps://www.suse.com/security/cve/CVE-2025-59163/\nhttps://www.suse.com/security/cve/CVE-2025-59531/\nhttps://www.suse.com/security/cve/CVE-2025-59537/\nhttps://www.suse.com/security/cve/CVE-2025-59538/\nhttps://www.suse.com/security/cve/CVE-2025-59823/\nhttps://www.suse.com/security/cve/CVE-2025-59824/\nhttps://www.suse.com/security/cve/CVE-2025-59941/\nhttps://www.suse.com/security/cve/CVE-2025-59942/\nhttps://www.suse.com/security/cve/CVE-2025-59956/\nhttps://www.suse.com/security/cve/CVE-2025-61595/\nhttps://www.suse.com/security/cve/CVE-2025-61926/\n","aliases":"CVE-2024-58260\nCVE-2024-58267\nCVE-2025-23266\nCVE-2025-23267\nCVE-2025-54468\nCVE-2025-55191\nCVE-2025-59163\nCVE-2025-59531\nCVE-2025-59537\nCVE-2025-59538\nCVE-2025-59823\nCVE-2025-59824\nCVE-2025-59941\nCVE-2025-59942\nCVE-2025-59956\nCVE-2025-61595\nCVE-2025-61926\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"069bc116-e90a-35da-be73-2573dc2bb814","product":{"name":"govulncheck-vulndb-0.0.20251023T162509-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"27510a90-edd4-329c-b076-c0cb0e7a4edf","product":{"name":"govulncheck-vulndb-0:0.0.20251023T162509-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3eaccb41-d5a0-38bb-9ffa-a3e18cd974ea","product":{"name":"govulncheck-vulndb-0:0.0.20251023T162509-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"658b52d1-a796-306a-b8e7-8640d2ef8e6d","product":{"name":"govulncheck-vulndb-0:0.0.20251023T162509-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"9538f7bb-6172-3cbb-b4a8-c4cbbfca24bf","product":{"name":"govulncheck-vulndb-0.0.20251023T162509-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"9c9b6bb2-f20d-3972-a86a-61769cb59d45","product":{"name":"govulncheck-vulndb-0:0.0.20251023T162509-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a2b98c10-dc2c-32be-b9b7-261dd67e0ecc","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"a600f628-d077-3294-b4cd-d19262b4fd4b","product":{"name":"govulncheck-vulndb-0.0.20251023T162509-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"fde27079-09c4-3706-80b4-6c26309d3cdc","product":{"name":"govulncheck-vulndb-0.0.20251023T162509-1.1.s390x","vendor":{"name":"SUSE"}}}]}}]}