CRITICAL🇬🇧 English

CVE-2021-36783

CVSS 9.9v3.1pub. 2022-09-07upd. 2024-11-21

A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API endpoints. This issue affects: SUSE Rancher Rancher versions prior to 2.6.4; Rancher versions prior to 2.5.13.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  • SUSE Rancher

    APP
    Suse
    2.5.0 – 2.5.13 (bez)2.6.0 – 2.6.4 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2026-44946CRITICAL9.5ten sam produkt

A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enfo...

CVE-2026-41052CRITICAL9.4PL ✓ten sam produkt

Eskalacja uprawnień dla roli Project Owner w Rancher (LPE)

CVE-2023-22647CRITICAL9.9ten sam produkt

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existi...

CVE-2023-22651CRITICAL9.9ten sam produkt

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the upda...

CVE-2022-43757CRITICAL9.9ten sam produkt

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to...