Skip to content
OpenAdvisories

Package · Go

github.com/rancher/rke

1 known vulnerabilities.

1 result · Feed

  • Critical 9.9

    rke's credentials are stored in the RKE1 Cluster state ConfigMap

    When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin.