What is the CVSS score of CVE-2025-62879?

CVE-2025-62879 has a CVSS 3.1 base score of 6.8 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Rancher Backup And Restore Operator are affected by CVE-2025-62879?

Organizations using A vulnerability should be aware of notable risk from CVE-2025-62879, a log file exposure vulnerability rated CVSS 6.8. This could allow unauthorized file access.. A patch is available.

How to fix or mitigate CVE-2025-62879?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review data exposure and access controls.

Rancher Backup And Restore Operator CVE-2025-62879

MEDIUM

Insertion of Sensitive Information into Log File (CWE-532)

2026-03-04 meissner@suse.de

GHSA-wj3p-5h3x-c74q

Information Disclosure Rancher Backup And Restore Operator Suse

6.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

SUSE

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 04, 2026 - 16:16 nvd

MEDIUM 6.8

DescriptionCVE.org

A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.

AnalysisAI

Rancher Backup And Restore Operator is affected by insertion of sensitive information into log file (CVSS 6.8).

Technical ContextAI

This vulnerability (CWE-532: Insertion of Sensitive Information into Log File) affects Rancher Backup And Restore Operator. has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

Same weakness CWE-532 – Insertion of Sensitive Information into Log File

View all

CVE-2023-43261 HIGH POC

7.5

CVE-2025-24984 MEDIUM

4.6

CVE-2017-8075 CRITICAL POC

9.8

CVE-2017-8074 CRITICAL POC

9.8

CVE-2026-22778 CRITICAL POC

9.8

CVE-2019-17395 CRITICAL POC

9.8

CVE-2019-17398 CRITICAL POC

9.8

CVE-2019-17394 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

SUSE

Severity: Medium

Product	Status
openSUSE Leap 15.6	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP5	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP6	Fixed
openSUSE Leap 15.5	Fixed

CVE-2025-62879 vulnerability details – vuln.today

Back

Rancher Backup And Restore Operator CVE-2025-62879

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-532 – Insertion of Sensitive Information into Log File

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code