Lucene search
Veracode Vulnerability DatabaseVERACODE:36969HistorySep 08, 2022 - 3:45 a.m.
Information Disclosure
2022-09-0803:45:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27
rancher
information disclosure
credentials
cluster template
api tokens
0.001 Low
EPSS
Percentile
37.0%
github.com/rancher/rancher is vulnerable to information disclosure. The vulnerability exists because of the lack of sanitization in credentials in cluster template answers of cluster_store.go, leading to plaintext storage and exposure of credentials, passwords and API tokens.
References
bugzilla.suse.com/show_bug.cgi?id=1193990
github.com/rancher/rancher/commit/63f1bc566f97edfb9a54c6163254927a6537fb76
github.com/rancher/rancher/commit/87776848094241456860f127da17a032089263ba
github.com/rancher/rancher/pull/36578
github.com/rancher/rancher/pull/36580
github.com/rancher/rancher/security/advisories/GHSA-8w87-58w6-hfv8
Related
osv
osv
CVE-2021-36783
2022-09-07 09:15:08
prion
prion
Design/Logic Flaw
2022-09-07 09:15:00
cve
cve
CVE-2021-36783
2022-09-07 09:15:08
cvelist
cvelist
nvd
nvd
CVE-2021-36783
2022-09-07 09:15:08