{"id":86043,"date":"2025-12-15T04:19:56","date_gmt":"2025-12-15T04:19:56","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2024-58260-critical-rancher-manager-vulnerability-allowing-user-access-denial","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-58260-critical-rancher-manager-vulnerability-allowing-user-access-denial\/","title":{"rendered":"CVE-2024-58260: Critical Rancher Manager Vulnerability Allowing User Access Denial<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A critical vulnerability, identified as CVE-2024-58260, has been discovered in Rancher Manager. This vulnerability allows users with update permissions on other User resources to cause denial of access for targeted accounts. The issue arises due to missing server-side validation on the `.username` field. Such a vulnerability poses a potential threat to the system’s security and data integrity.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2024-58260
\nSeverity: Critical; CVSS Score: 7.6
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Possible system compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Rancher Manager | All versions before the patch<\/p>\n

How the Exploit Works<\/strong><\/p>\n

An attacker with update permissions on other User resources can exploit this vulnerability. The attacker fills the `.username` field with specially crafted entries, which due to the missing server-side validation, can cause denial of access for the specified user. This can potentially lead to unauthorized system access or data leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

An attacker might exploit the vulnerability with a malicious HTTP request similar to the following:<\/p>\n

PUT \/v3\/users\/{userId} HTTP\/1.1\nHost: rancher.example.com\nContent-Type: application\/json\n{\n\"username\": \"targeted_username\",\n\"accessMode\": \"blocked\"\n}<\/code><\/pre>\n
In this conceptual example, the attacker sends a PUT request to the user update endpoint with the targeted_username and sets the accessMode to ‘blocked’. As a result, the targeted user is denied access to their account.
\nNote: This is a conceptual example and may not directly apply to the vulnerable system. The actual exploit might differ based on the system configuration and the attacker’s approach.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview A critical vulnerability, identified as CVE-2024-58260, has been discovered in Rancher Manager. This vulnerability allows users with update permissions on other User resources to cause denial of access for targeted accounts. The issue arises due to missing server-side validation on the `.username` field. Such a vulnerability poses a potential threat to the system’s security […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-86043","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t