Medium severity · published Oct 16, 2024
CVE-2024-22032
Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability has been identified in which an RKE1 cluster keeps
constantly reconciling when secrets encryption configuration is enabled.
When reconciling, the Kube API secret values are written in plaintext
on the AppliedSpec. Cluster owners, Cluster members, and Project members
(for projects within the cluster), all have RBAC permissions to view
the cluster object from the apiserver.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
rancher · SUSE
2.7.0 before 2.7.14; 2.8.0 before 2.8.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-22032
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-22032
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-22032
github.com
https://github.com/rancher/rancher/security/advisories/GHSA-q6c7-56cq-g2wm
More from rancher
9.9
CVE-2026-44935
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
9.9
CVE-2026-41050
Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
9.9
CVE-2025-62878
Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
9.9
CVE-2023-22651
Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation
9.9
CVE-2021-36783
A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials,…