Rancher users who can create Projects can gain access to arbitrary projects

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2024-22031 · Microsoft / collected KEV context

EUVD-2024-55800

GHSA-8h6m-wv39-239m

GO-2025-3647

cve-program · CVE-2024-22031

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-22031
• https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m

euvd · EUVD-2024-55800

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-22031
• https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m

nvd · CVE-2024-22031

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-22031
• https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m

osv · GHSA-8h6m-wv39-239m

• https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m
• https://github.com/rancher/rancher/commit/7f16b596120dd382ce6e9ed0baf83bc23f633054
• https://github.com/rancher/rancher/commit/9c1d1c2bfcba36ae4f06c1fd043eb539ad801d4d
• https://github.com/rancher/rancher/commit/b0be28f86fc556414bd9b323f05b2b4bf8317c2d
• https://github.com/rancher/rancher/commit/f036e8b6ab726c3abbc03bbf7c8d0d53373c84e5
• https://github.com/rancher/rancher
• https://pkg.go.dev/vuln/GO-2025-3647

osv · GO-2025-3647

• https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m

No related operational record is retained in the current change model.