PT-2026-83115
CVE-2026-75034
·
تاريخ النشر
2026-08-28
·
تاريخ التحديث
2026-09-18
الوصف من
CVSS 3.1
7.4
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Rancher versions prior to 2.15.1
Description
Rancher Manager contains a flaw in its SAML assertion replay protection. Consumed assertion IDs are recorded in a per-process cache, meaning each replica only detects replays that reach the same pod. In high-availability deployments, an attacker with a captured assertion can replay it against every other replica to obtain multiple authenticated sessions as the victim.
Recommendations
Update to version 2.15.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾