{"uuid": "00978d8b-f275-476f-8a05-1d8ed2d00bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22649", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/linux/gather/rancher_audit_log_leak.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"Rancher versions between 2.6.0-2.6.13, 2.7.0-2.7.9, 2.8.0-2.8.1 inclusive\\n          contain a vulnerability where sensitive data is leaked into the audit logs.\\n          Rancher Audit Logging is an opt-in feature, only deployments that have it\\n          enabled and have AUDIT_LEVEL set to 1 or above are impacted by this issue.\\n\\n          Tested against rancher 2.6.0.\", \"disclosure_date\": \"2024-02-08\", \"fullname\": \"post/linux/gather/rancher_audit_log_leak\", \"is_install_path\": true, \"mod_time\": \"2026-02-09 15:17:23 +0000\", \"name\": \"Rancher Audit Log Sensitive Information Leak\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/linux/gather/rancher_audit_log_leak.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"linux/gather/rancher_audit_log_leak\", \"references\": [\"GHSA-xfj7-qf8w-2gcr\", \"URL-https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/enable-api-audit-log#api-audit-log-options\", \"CVE-2023-22649\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:41.188457Z"}