CVE-2025-54468: CVE-2025-54468: hassas bilgi ifşası

Açıklama (NVD)

A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses.

Özet bilgiler

CVSS v3.1

4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

EPSS

%0,36 (yüzdelik 30)

CWE

CWE-200

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• bugzilla.suse.com
• github.com
• CWE-200