CVE-2022-43757: A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain access to credentials. The impact depends…

PriorityP350high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

0.55%

42.0th percentile

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain access to credentials. The impact depends on the credentials exposed This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
github.com	rancher_rancher	>= 2.5.0 < 2.5.17	2.5.17
github.com	rancher_rancher	>= 2.6.0 < 2.6.10	2.6.10
github.com	rancher_rancher	>= 2.7.0 < 2.7.1	2.7.1
suse	rancher	>= 2.5.0 < 2.5.17	2.5.17
suse	rancher	>= 2.6.0 < 2.6.10	2.6.10
suse	rancher	>= 2.7.0 < 2.7.1	2.7.1
suse	rancher	>= Rancher < 2.5.17	2.5.17

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

ghsa9.9CRITICAL

osv9.9CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.