CVE-2023-32191
2 advisories.
Go/github.com/rancher/rke CVE-2023-32191: critical 9.9
rke's credentials are stored in the RKE1 Cluster state ConfigMap
Action: Upgrade github.com/rancher/rke to 1.4.19 or later.
go get github.com/rancher/rke@v1.4.19go get github.com/rancher/rke@v1.5.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.18 | 1.4.19 | - |
| 1.5.9 | 1.5.10 | - |
Fixed versions
| 1.4.19 | 1.5.10 |
Sources
- osv: GHSA-6gr4-52w6-vmqx
- https://github.com/rancher/rke/security/advisories/GHSA-6gr4-52w6-vmqx
- https://nvd.nist.gov/vuln/detail/CVE-2023-32191
- https://github.com/rancher/rke/commit/cf49199481a1891909acb1384eed73a5c987d5bd
- https://github.com/rancher/rke/commit/f7485b8dce376db0fc15a7c3ceb3de7029c8d0cf
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32191
- https://github.com/rancher/rke
CVE-2023-32191 · published · modified · JSON
Go/github.com/rancher/rke CVE-2023-32191: unknown
RKE credentials are stored in the RKE1 Cluster state ConfigMap in github.com/rancher/rke
Action: Upgrade github.com/rancher/rke to 1.4.19 or later.
go get github.com/rancher/rke@v1.4.19go get github.com/rancher/rke@v1.5.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.18 | 1.4.19 | - |
| 1.5.9 | 1.5.10 | - |
Fixed versions
| 1.4.19 | 1.5.10 |
Sources
- osv: GO-2024-2930
- https://github.com/rancher/rke/security/advisories/GHSA-6gr4-52w6-vmqx
- https://github.com/rancher/rke/commit/cf49199481a1891909acb1384eed73a5c987d5bd
- https://github.com/rancher/rke/commit/f7485b8dce376db0fc15a7c3ceb3de7029c8d0cf
CVE-2023-32191 · published · modified · JSON