Vulnerabilities > Suse > Rancher Rke2 > 1.19.12

DATE CVE VULNERABILITY TITLE RISK
2021-07-28 CVE-2021-32001 Unspecified vulnerability in Suse Rancher K3S and Rancher Rke2
K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material (cluster certificate authority private keys, secrets encryption configuration passphrase, etc.) and decrypt it, without having to know the token value.
network
low complexity
suse
6.5