CVE-2021-36782

Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issue affects: SUSE Rancher Rancher versions prior to 2.5.16; Rancher versions prior to 2.6.7.

Affected

SUSE · Rancher

CVSS v3.1 NVD

9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

4.17% chance of exploitation in the next 30 days, 91st percentile

Published

2022-09-07

Updated

2024-09-17

Proof-of-concept exploits (1)

• fe-ax/tf-cve-2021-367820★ · 2024-10-28

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/rancher_authenticated_ap…

Security advisories

• https://bugzilla.suse.com/show_bug.cgi?id=1193988
• rancher/rancher/security/advisories/GHSA-g7j7-h4q8-8w2f
• advisories/GHSA-g7j7-h4q8-8w2f

References

• CVE Record
• NVD entry