Skip to content

x/vulndb: potential Go vuln in github.com/rancher/rancher: GHSA-xh8x-j8h3-m5ph #2784

New issue
New issue
Closed
Closed
x/vulndb: potential Go vuln in github.com/rancher/rancher: GHSA-xh8x-j8h3-m5ph#2784
Assignees
maceonthompson
Labels
triaged
@GoVulnBot

Description

@GoVulnBot
GoVulnBot
opened on Apr 25, 2024

In GitHub Security Advisory GHSA-xh8x-j8h3-m5ph, there is a vulnerability in the following Go packages or modules:

Unit Fixed Vulnerable Ranges
github.com/rancher/rancher 2.2.2 >= 2.2.0, < 2.2.2

Cross references:

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/rancher/rancher
      versions:
        - introduced: 2.2.0
          fixed: 2.2.2
      packages:
        - package: github.com/rancher/rancher
    - module: github.com/rancher/rancher
      versions:
        - introduced: TODO (earliest fixed "", vuln range ">= 2.1.0, <= 2.1.8")
      packages:
        - package: github.com/rancher/rancher
    - module: github.com/rancher/rancher
      versions:
        - introduced: TODO (earliest fixed "", vuln range ">= 2.0.0, <= 2.0.13")
      packages:
        - package: github.com/rancher/rancher
summary: Rancher Recreates Default User With Known Password Despite Deletion in github.com/rancher/rancher
cves:
    - CVE-2019-11202
ghsas:
    - GHSA-xh8x-j8h3-m5ph
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2019-11202
    - web: https://forums.rancher.com/t/rancher-release-v2-2-2-addresses-rancher-cve-2019-11202-and-stability-issues/13977
    - advisory: https://github.com/advisories/GHSA-xh8x-j8h3-m5ph
source:
    id: GHSA-xh8x-j8h3-m5ph

Metadata

Metadata

Assignees

Labels

triaged

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions