CVE-2019-11881

A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit phishing sites with scare tactics, e.g., displaying a "This version of Rancher is outdated, please visit https://malicious.rancher.site/upgrading" message.

• https://github.com/MauroEldritch/VanCleefThird Party Advisory
• https://github.com/rancher/rancher/blob/v2.2.4/pkg/auth/providers/saml/saml_client.go#L282
• https://github.com/rancher/rancher/commit/e59adbc7565251919d84d6e353421104be8da06e
• https://github.com/rancher/rancher/issues/20216Exploit, Issue Tracking, Third Party Advisory
• https://github.com/MauroEldritch/VanCleefThird Party Advisory
• https://github.com/rancher/rancher/issues/20216Exploit, Issue Tracking, Third Party Advisory

Published

Jun 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11876In PrestaShop 1.7.5.2, the shop_country parameter in the ins…
• CVE-2019-11877XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v2…
• CVE-2019-11878An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.…
• CVE-2019-11879The WEBrick gem 1.4.2 for Ruby allows directory traversal if…
• CVE-2019-1188A remote code execution vulnerability exists in Microsoft Wi…7.5
• CVE-2019-11880CommSy through 8.6.5 has SQL Injection via the cid parameter…
• CVE-2019-11884The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c…3.3
• CVE-2019-11885eyeDisk implements the unlock feature by sending a cleartext…
• CVE-2019-11886The WaspThemes Visual CSS Style Editor (aka yellow-pencil-vi…
• CVE-2019-11887SimplyBook.me through 2019-05-11 does not properly restrict …
• CVE-2019-11888Go through 1.12.5 on Windows mishandles process creation wit…
• CVE-2019-11889Sony BRAVIA Smart TV devices allow remote attackers to cause…