Information Disclosure

🗓️ 27 Sep 2022 16:10:08Reported by Veracode Vulnerability DatabaseType

Rancher vulnerability to information disclosure, plaintext password storage

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of Kubernets Rancher cluster management software, related to unencrypted storage of user data, allows a hacker to escalate their privileges.	12 Sep 202200:00	–	bdu_fstec
Circl	CVE-2021-36782	19 Apr 202418:10	–	circl
CNNVD	Rancher Labs Rancher 安全漏洞	7 Sep 202200:00	–	cnnvd
CVE	CVE-2021-36782	7 Sep 202208:20	–	cve
Cvelist	CVE-2021-36782 Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object	7 Sep 202208:20	–	cvelist
Github Security Blog	Rancher API and cluster.management.cattle.io object vulnerable to plaintext storage and exposure of credentials	23 Sep 202218:11	–	github
Metasploit	Rancher Authenticated API Credential Exposure	19 Apr 202419:51	–	metasploit
NVD	CVE-2021-36782	7 Sep 202209:15	–	nvd
OSV	GHSA-G7J7-H4Q8-8W2F Rancher API and cluster.management.cattle.io object vulnerable to plaintext storage and exposure of credentials	23 Sep 202218:11	–	osv
Packet Storm	Rancher Authenticated API Credential Exposure	31 Aug 202400:00	–	packetstorm

Vulners

Node

rancher github.com/rancher/rancherRangev2.5.0-alpha1–2.5.0-alpha1go

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
github	www.github.com/rancher/rancher/commit/ae28532e1514adce1dd2efcc47f5c65f64bfe5c5
github	www.github.com/rancher/rancher/commit/05fab40d32dae197d112d54412464686d43a5fb1
github	www.github.com/advisories/GHSA-g7j7-h4q8-8w2f
github	www.github.com/rancher/rancher/security/advisories/GHSA-g7j7-h4q8-8w2f

27 Apr 2023 16:07Current

8.3High risk

Vulners AI Score8.3

CVSS 3.19.9

EPSS0.0293