CVE-2022-21951

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This issue affects: SUSE Rancher Rancher versions prior to 2.5.14; Rancher versions prior to 2.6.5.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published
May 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-219527.5A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows reCVE-2022-219538.8A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access inCVE-2022-219546.1Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-219577.2Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2022-219586.8Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityCVE-2022-219596.8Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityCVE-2022-21968.8A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacksCVE-2022-219606.8Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityCVE-2022-219616.8Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityCVE-2022-219626.8Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityCVE-2022-219636.8Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityCVE-2022-219645.5Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability
CVE-2022-21951: Medium severity, CVSS 6.8 | Vulnix