{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-17T19:22:45.821","vulnerabilities":[{"cve":{"id":"CVE-2025-23387","sourceIdentifier":"meissner@suse.de","published":"2025-04-11T11:15:42.367","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users to list all CLI authentication tokens and delete them before the CLI is able to get the token value.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3."},{"lang":"es","value":"Una vulnerabilidad de exposición de información confidencial a un actor no autorizado en SUSE Rancher permitía a usuarios no autenticados enumerar todos los tokens de autenticación de la CLI y eliminarlos antes de que la CLI pueda obtener el valor del token. Este problema afecta a Rancher: desde la versión 2.8.0 hasta la 2.8.13, desde la versión 2.9.0 hasta la 2.9.7, desde la versión 2.10.0 hasta la 2.10.3."}],"metrics":{"cvssMetricV31":[{"source":"meissner@suse.de","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"meissner@suse.de","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23387","source":"meissner@suse.de"},{"url":"https://github.com/rancher/rancher/security/advisories/GHSA-5qmp-9x47-92q8","source":"meissner@suse.de"}]}}]}