cve.bz

CVE-2021-36782

9.9 criticalEPSS 4.2%

Critical (9.9) in suse rancher. EPSS 4.2% chance of exploitation in the next 30 days. Fixed in github.com/rancher/rancher 2.5.16, 2.6.7.

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issue affects: SUSE Rancher Rancher versions prior to 2.5.16; Rancher versions prior to 2.6.7.

Severity

CVSS 3.1

9.9 critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE
CWE-312
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-g7j7-h4q8-8w2fGogithub.com/rancher/rancher>=2.5.0 <2.5.162.5.16
GHSA-g7j7-h4q8-8w2fGogithub.com/rancher/rancher>=2.6.0 <2.6.72.6.7

References

Check your stackJSON