{"id":86043,"date":"2025-12-15T04:19:56","date_gmt":"2025-12-15T04:19:56","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2024-58260-critical-rancher-manager-vulnerability-allowing-user-access-denial","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-58260-critical-rancher-manager-vulnerability-allowing-user-access-denial\/","title":{"rendered":"CVE-2024-58260: Critical Rancher Manager Vulnerability Allowing User Access Denial<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A critical vulnerability, identified as CVE-2024-58260, has been discovered in Rancher Manager. This vulnerability allows users with update permissions on other User resources to cause denial of access for targeted accounts. The issue arises due to missing server-side validation on the `.username` field. Such a vulnerability poses a potential threat to the system’s security and data integrity.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2024-58260
\nSeverity: Critical; CVSS Score: 7.6
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Possible system compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n