Critical severity · published Nov 13, 2024
CVE-2022-45157
Exposure of vSphere's CPI and CSI credentials in Rancher
9.1
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI (Container Storage Interface) credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext object inside Rancher. This vulnerability is only applicable to users that deploy clusters in vSphere environments.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
Low
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
rancher · SUSE
2.9.0 before 2.9.3; 2.7.0 before 2.8.9 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-45157
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-45157
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-45157
github.com
https://github.com/rancher/rancher/security/advisories/GHSA-xj7w-r753-vj8v
More from rancher
9.9
CVE-2026-44935
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
9.9
CVE-2026-41050
Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
9.9
CVE-2025-62878
Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
9.9
CVE-2023-22651
Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation
9.9
CVE-2021-36783
A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials,…