VULNERABILITY INTELLIGENCE
CVE-2025-62879
CVSS score6.8 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Description
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.
Weakness classification
- meissner@suse.de: CWE-532
Primary references
- meissner@suse.de — Third Party Advisory
- meissner@suse.de — Third Party Advisory