CRITICAL🇬🇧 English

CVE-2022-43757

CVSS 9.9v3.1pub. 2023-02-07upd. 2024-11-21

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain access to credentials. The impact depends on the credentials exposed This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  • SUSE Rancher

    APP
    Suse
    2.5.0 – 2.5.17 (bez)2.6.0 – 2.6.10 (bez)2.7.0 – 2.7.1 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2026-44946CRITICAL9.5ten sam produkt

A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enfo...

CVE-2026-41052CRITICAL9.4PL ✓ten sam produkt

Eskalacja uprawnień dla roli Project Owner w Rancher (LPE)

CVE-2023-22647CRITICAL9.9ten sam produkt

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existi...

CVE-2023-22651CRITICAL9.9ten sam produkt

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the upda...

CVE-2021-36782CRITICAL9.9ten sam produkt

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners...