What is CVE-2024-52280?

CVE-2024-52280 is a high-severity vulnerability in Suse Rancher, classified under Information Disclosure. CVSS score: 7.7/10. Published 2025-04-11.

How severe is CVE-2024-52280?

High severity. CVSS v3 base score is 7.7 out of 10.

Is CVE-2024-52280 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Suse Rancher

CVE-2024-52280

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to watch resources they are not allowed to access, when they have at least some generic permissions on the type. This issue aff…

Vulnerability class: Information Disclosure

EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.

Affected products

Suse Rancher — versions 0

Weakness classification (CWE)

CWE-200 — Information Disclosure

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

Frequently asked questions

What is CVE-2024-52280?: CVE-2024-52280 is a high-severity vulnerability in Suse Rancher, classified under Information Disclosure. CVSS score: 7.7/10. Published 2025-04-11.
How severe is CVE-2024-52280?: High severity. CVSS v3 base score is 7.7 out of 10.
Is CVE-2024-52280 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.