Lucene search
Veracode Vulnerability DatabaseVERACODE:35718HistoryMay 26, 2022 - 7:18 a.m.
Man-in-the-middle (MITM)
2022-05-2607:18:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
0.001 Low
EPSS
Percentile
30.4%
github.com/rancher/rancher is vulnerable to man-in-the-middle attacks. A remote attacker is able to read and change network data because the network traffic in the cluster is sent unencrypted when it is created from an RKE template with the CNI value overridden.
References
bugzilla.suse.com/show_bug.cgi?id=1199443
github.com/rancher/rancher/commit/0f37c674860acbcc9428a61b7b7508262775b300
github.com/rancher/rancher/commit/a31f5b8613d994122d9a7460700b028e61970ab5
github.com/rancher/rancher/pull/37504
github.com/rancher/rancher/pull/37606
github.com/rancher/rancher/security/advisories/GHSA-vrph-m5jj-c46c
Related
cve
cve
CVE-2022-21951
2022-05-25 09:15:08
cvelist
cvelist
cnvd
cnvd
Rancher Labs Rancher Sensitive Data Encryption Missing Vulnerability
2022-05-27 00:00:00
nvd
nvd
CVE-2022-21951
2022-05-25 09:15:08
prion
prion
Design/Logic Flaw
2022-05-25 09:15:00
osv
osv
CVE-2022-21951
2022-05-25 09:15:08