Description
A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain access to credentials. The impact depends on the credentials exposed This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Rancher | Rancher – < 2.5.17 | 2.5.17 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | >= 2.5.0, < 2.5.17 | 2.5.17 | GHSA-cq4p-vp5q-4522 |
| Go | github.com/rancher/rancher | >= 2.6.0, < 2.6.10 | 2.6.10 | GHSA-cq4p-vp5q-4522 |
| Go | github.com/rancher/rancher | >= 2.7.0, < 2.7.1 | 2.7.1 | GHSA-cq4p-vp5q-4522 |
Advisories 1
- WID-SEC-2023-0197 Rancher: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 24, 2023