Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2021-36782

Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issue affects: SUSE Rancher Rancher versions prior to 2.5.16; Rancher versions prior to 2.6.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Rancher

  • Rancher to < 2.5.16affected

SUSE Rancher

  • Rancher to < 2.6.7affected

References