[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faxX-71rFomg92qKO7JydqQkzHkRi6dZ3tGrC_U_Ikiw":3,"g5a-risk:CVE-2023-22649":137},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":28,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":62,"weaknesses":63,"weaknessesCount":49,"isActivelyExploited":72,"cisaInfo":28,"otxData":28,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":118,"notableEvents":119},"CVE-2023-22649","What is CVE-2023-22649?","A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Audit Logging](https:\u002F\u002Franchermanager.docs.rancher.com\u002Fhow-to-guides\u002Fadvanced-user-guides\u002Fenable-api-audit-log) is an opt-in feature, only deployments that have it enabled and have [AUDIT_LEVEL](https:\u002F\u002Franchermanager.docs.rancher.com\u002Fhow-to-guides\u002Fadvanced-user-guides\u002Fenable-api-audit-log#audit-log-levels) set to `1 or above` are impacted by this issue.","A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Audit Logging](https:\u002F\u002Franchermanager.d...","2024-10-16T08:15:04.39","2024-10-30T21:08:46.247",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":38,"ImpactScore":39},"meissner@suse.de","Secondary",{"Version":20,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":26,"UserInteraction":24,"Scope":36,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":37,"BaseSeverity":26,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",8.4,1.7,6,0.02039,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"suse","rancher","*","cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:undefined",1,[51,56],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=CVE-2023-22649","Suse",[55],"Issue Tracking",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fgithub.com\u002Francher\u002Francher\u002Fsecurity\u002Fadvisories\u002FGHSA-xfj7-qf8w-2gcr","GitHub",[60,61],"Mitigation","Vendor Advisory",2,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-532","Insertion of Sensitive Information into Log File","Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.","While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers.\nDifferent log files may be produced and stored for:","Incomplete","Base","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2023-22649? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-22649, a medium severity cyber security vulnerability from 2024. A vulnerability has been identified which may lead to sen...","CVE-2023-22649, CVE-2023-22649 vulnerability, CVE-2023-22649 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, suse security, rancher vulnerability","\u002Fwhat-is\u002Fcve-2023-22649",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-22649","Cybersecurity","CVE-2023-22649, CVE-2023-22649 vulnerability, CVE-2023-22649 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":28,"Negate":28,"Nodes":101},[102],{"Operator":103,"Negate":28,"CPEMatch":104},"OR",[105,109,114],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":106,"VersionStartExcluding":28,"VersionStartIncluding":107,"VersionEndExcluding":108,"VersionEndIncluding":28},"7E5F316C-3BAF-499F-8E5E-9FAA7C686E0B","2.6.0","2.6.14",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":111,"VersionStartExcluding":28,"VersionStartIncluding":112,"VersionEndExcluding":113,"VersionEndIncluding":28},"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","3EBD04A7-9322-484A-A2C3-2D6DC6A14ACB","2.7.0","2.7.10",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":115,"VersionStartExcluding":28,"VersionStartIncluding":116,"VersionEndExcluding":117,"VersionEndIncluding":28},"E38E7655-CB37-4FA5-B885-92985739D618","2.8.0","2.8.2",[],[120,127],{"id":121,"eventType":122,"eventTime":123,"details":124,"label":125,"color":126},"3b7ae688-b277-4361-a91f-2ce3c31852c6","HIGH_EPSS_DELTA","2025-11-19T04:05:23.33773+00:00","Daily EPSS score increased by 0.123 on 2024-10-18","EPSS Score Increased","red",{"id":128,"eventType":129,"eventTime":130,"details":131,"label":132,"color":133},"f432746f-ac9f-4c45-93b0-48175b73f460","LOW_EPSS_DELTA","2025-11-22T04:05:11.252244+00:00","Daily EPSS score decreased by 0.123 on 2024-10-18","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":135,"version":136},1793200376536,"2.0",{"score":138,"band":42,"action":139,"scoredAt":140},49,"Plan remediation","2026-10-28T07:04:15.448725+00:00"]