Skip to content
OpenAdvisories

Package · Go

github.com/rancher/rancher

60 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2021-36782 Public exploit

    Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object

    A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issu…

    SUSE Rancher github.com/rancher/rancher Go
  • Medium 4.7
    CVE-2019-11881 Public exploit

    Rancher Login Parameter Can Be Edited

    A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malici…

    github.com/rancher/rancher Go