Rancher: Exposure of sensitive fields

CVE-2022-43757

Summary

A vulnerability in SUSE Rancher pertains to the cleartext storage of sensitive information, enabling users on managed clusters to access critical credentials. The ramifications of this issue largely hinge on the type of credentials that may be exposed. This vulnerability impacts specific versions of Rancher prior to 2.5.17, 2.6.10, and 2.7.1, warranting immediate attention from organizations employing affected versions to ensure the integrity and security of their systems.

References