| Package | Affected versions | Patched versions |
|---|---|---|
| rancher | ≥ 2.11.0, < 2.11.15≥ 2.12.0, < 2.12.11≥ 2.13.0, < 2.13.7≥ 2.14.0, < 2.14.3 | 2.11.152.12.112.13.72.14.3 |
A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce one-time use of SAML assertion, potentially allowing person in the middle attacks against Rancher, affecting Rancher 2.14.0 before 2.14.3,
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free