Vulnerability · Published Sep 7, 2022 · Assigned by suse

CVE-2021-36782Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object

Critical 9.9

In plain English

A critical-severity security flaw in Rancher from SUSE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.2% (higher than 91% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.9Critical

Exploit odds (30 days)4.2%top 9.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling2Metasploit, Public PoC

Official description

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issue affects: SUSE Rancher Rancher versions prior to 2.5.16; Rancher versions prior to 2.6.7.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/rancher/rancher	2.5.16	GHSA-g7j7-h4q8-8w2f
Go	github.com/rancher/rancher	2.6.7	GHSA-g7j7-h4q8-8w2f

Affected products (as reported)

Vendor	Product	Versions
SUSE	Rancher	Rancher – before 2.5.16
SUSE	Rancher	Rancher – before 2.6.7

Weakness: CWE-312 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://bugzilla.suse.com/show_bug.cgi?id=1193988 x_refsource_CONFIRM
https://github.com/rancher/rancher/security/advisories/GHSA-g7j7-h4q8-8w2f x_refsource_CONFIRM