6.8
Medium
CVE-2022-21951 A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network…
Description
A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This issue affects: SUSE Rancher Rancher versions prior to 2.5.14; Rancher versions prior to 2.6.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rancher 2.6 | earliest → < 2.6.5 | 2.6.5 |
References
- bugzilla.suse.com bugzilla.suse.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Rancher
The 86 CVEs of Rancher →
CVE-2026-88811
Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud…
9.1
Critical
CVE-2026-88810
A privilege escalation issue was discovered in Rancher Manager's role-based access control
7.2
High
CVE-2026-88809
A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy)
7.6
High
CVE-2026-94290
SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent…
9.1
Critical