All vulnerabilities

Servers and applications

CVE-2024-22032

RKE1 Encryption Config kept in plain-text within cluster AppliedSpec

Severity
Medium 6.5
Published
17 Jun 2024
Last changed
17 Jun 2024
Added to UpHeron
3 Nov 2026
Fixed in
2.7.14, 2.8.5
Also known as
GHSA-q6c7-56cq-g2wm
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
RancherServers and applications · github:rancher/rancher
  • From 2.7.0 before 2.7.14
  • From 2.8.0 before 2.8.5

References