CVE-2022-43755

Summary

A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to continue abusing this even after the token was renewed. This issue affects: SUSE Rancher Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.

Affected Software

Weaknesses

• CWE-331: CWE-331: Insufficient Entropy

ADP Enrichment

CVE Program Container

Additional References

• https://bugzilla.suse.com/show_bug.cgi?id=1205297

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://bugzilla.suse.com/show_bug.cgi?id=1205297

• ←Previous
• Next→