Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-36783

Good to know:

icon

Date: September 7, 2022

A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API endpoints. This issue affects: SUSE Rancher Rancher versions prior to 2.6.4; Rancher versions prior to 2.5.13.

Language: Go

Severity Score

Related Resources (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-36783
https://github.com/rancher/rancher/security/advisories/GHSA-8w87-58w6-hfv8
https://bugzilla.suse.com/show_bug.cgi?id=1193990
https://www.mend.io/vulnerability-database/CVE-2021-36783

Severity Score

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Insufficiently Protected Credentials

CWE-522

Cleartext Storage of Sensitive Information

CWE-312

Top Fix

icon

Upgrade Version

Upgrade to version v2.5.13,v2.6.4

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us