What is the CVSS score of CVE-2024-58267?

CVE-2024-58267 has a contested CVSS base score of 8.0 from a third party (e.g. CISA-ADP), while the vendor rates it High. vuln.today uses the vendor rating as authoritative.

Which versions of Suse are affected by CVE-2024-58267?

Organizations using A vulnerability face notable risk from CVE-2024-58267 rated CVSS 8.0.. A patch is available.

How to fix or mitigate CVE-2024-58267?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Suse CVE-2024-58267

HIGH

Insufficient Verification of Data Authenticity (CWE-345)

2025-10-02 meissner@suse.de

GHSA-v3vj-5868-2ch2

Information Disclosure Suse

High

Disputed · 8.0 NVD

Severity by source

Sources disagree (Low–High)

NVD PRIMARY

8.0 HIGH

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

SUSE

3.1 LOW

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 13, 2026 - 19:12 vuln.today

CVE Published

Oct 02, 2025 - 12:15 nvd

HIGH 8.0

DescriptionCVE.org

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens.