{"id":86043,"date":"2025-12-15T04:19:56","date_gmt":"2025-12-15T04:19:56","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2024-58260-critical-rancher-manager-vulnerability-allowing-user-access-denial","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-58260-critical-rancher-manager-vulnerability-allowing-user-access-denial\/","title":{"rendered":"CVE-2024-58260: Critical Rancher Manager Vulnerability Allowing User Access Denial<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A critical vulnerability, identified as CVE-2024-58260, has been discovered in Rancher Manager. This vulnerability allows users with update permissions on other User resources to cause denial of access for targeted accounts. The issue arises due to missing server-side validation on the `.username` field. Such a vulnerability poses a potential threat to the system’s security and data integrity.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2024-58260
\nSeverity: Critical; CVSS Score: 7.6
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Possible system compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n