icon

We found results for “

CVE-2021-36783

Good to know:

icon

Date: September 7, 2022

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API endpoints. This issue affects: SUSE Rancher Rancher versions prior to 2.6.4; Rancher versions prior to 2.5.13.

Language: Go

Severity Score

Severity Score

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Cleartext Storage of Sensitive Information

CWE-312

Top Fix

icon

Upgrade Version

Upgrade to version v2.5.13,v2.6.4

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us