Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2021-36778

Exposure of repository credentials to external third-party sources

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers. This issue affects: SUSE Rancher Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Rancher

  • Rancher to < 2.5.12affected

SUSE Rancher

  • Rancher to < 2.6.3affected

References