Critical · published September 7, 2022
🚨 Authenticated users can easily access sensitive data—cleartext credentials, passwords, and API tokens are exposed via the API! 🔥 This is like leaving your safe unlocked while letting everyone in the office know the combination. Anyone can waltz right in and take whatever they want without breaking a sweat! The consequences could be absolutely devastating: an attacker could gain unauthorized access to critical systems, leading to data breaches, system takeovers, and serious reputational damage. With the right tokens, they could orchestrate all kinds of mayhem within your infrastructure!
This is like leaving your safe unlocked while letting everyone in the office know the combination. Anyone can waltz right in and take whatever they want without breaking a sweat! This vulnerability stems from insufficient protection of stored credentials in SUSE Rancher, allowing authenticated users like Cluster Owners and Project Members to read sensitive information directly from API endpoints.
The consequences could be absolutely devastating: an attacker could gain unauthorized access to critical systems, leading to data breaches, system takeovers, and serious reputational damage. With the right tokens, they could orchestrate all kinds of mayhem within your infrastructure! Update your Rancher deployment to versions 2.6.4 or 2.5.13 or later immediately. Additionally, review your API security practices and implement encryption for stored credentials to prevent future exposures. You've got this! Take action now, and you’ll have your security back on track in no time! 🛡️