[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7qgMPFQlzat-lLF2DWFZk6812LGhxnNkijyO7VCYnp4":3,"g5a-risk:CVE-2021-36782":128},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":58,"weaknesses":59,"weaknessesCount":43,"isActivelyExploited":68,"cisaInfo":27,"otxData":27,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":109,"notableEvents":110},"CVE-2021-36782","What is CVE-2021-36782?","A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issue affects: SUSE Rancher Rancher versions prior to 2.5.16; Rancher versions prior to 2.6.7.","A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Memb...","2022-09-07T09:15:08.397","2023-01-18T14:29:28.4",9.9,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.1,6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"meissner@suse.de","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.0293,[34,34,34,34,34,34,34],"Critical",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"suse","rancher","*","cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*",1,[45,53],{"url":46,"source":47,"tags":48},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1193988","Suse",[49,50,51,52],"Exploit","Issue Tracking","Mitigation","Vendor Advisory",{"url":54,"source":55,"tags":56},"https:\u002F\u002Fgithub.com\u002Francher\u002Francher\u002Fsecurity\u002Fadvisories\u002FGHSA-g7j7-h4q8-8w2f","GitHub",[49,51,57],"Third Party Advisory",2,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-312","Cleartext Storage of Sensitive Information","The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.","Because the information is stored in cleartext (i.e., unencrypted), attackers could potentially read it. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.\nWhen organizations adopt cloud services, it can be easier for attackers to access the data from anywhere on the Internet.\nIn some systems\u002Fenvironments such as cloud, the use of \"double encryption\" (at both the software and hardware layer) might be required, and the developer might be solely responsible for both layers, instead of shared responsibility with the administrator of the broader system\u002Fenvironment.","Draft","Base","Simple",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2021-36782? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-36782, a critical severity cyber security vulnerability from 2022. A Cleartext Storage of Sensitive Information vulnerabil...","CVE-2021-36782, CVE-2021-36782 vulnerability, CVE-2021-36782 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, suse security, rancher vulnerability","\u002Fwhat-is\u002Fcve-2021-36782",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-36782","Cybersecurity","CVE-2021-36782, CVE-2021-36782 vulnerability, CVE-2021-36782 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":27,"Negate":27,"Nodes":97},[98],{"Operator":99,"Negate":27,"CPEMatch":100},"OR",[101,105],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":102,"VersionStartExcluding":27,"VersionStartIncluding":103,"VersionEndExcluding":104,"VersionEndIncluding":27},"0F219B91-5B6F-460A-A75F-93555ECF2C1A","2.5.0","2.5.16",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":106,"VersionStartExcluding":27,"VersionStartIncluding":107,"VersionEndExcluding":108,"VersionEndIncluding":27},"B45FC83F-E91A-4872-996E-72685FBD0AA3","2.6.0","2.6.7",[],[111,118],{"id":112,"eventType":113,"eventTime":114,"details":115,"label":116,"color":117},"533a6bcd-f419-4e67-b616-23c62be40e82","LOW_EPSS_DELTA","2025-11-19T04:05:57.605958+00:00","Daily EPSS score decreased by 0.269 on 2023-12-30","EPSS Score Decreased","green",{"id":119,"eventType":120,"eventTime":121,"details":122,"label":123,"color":124},"02fbb7cf-056e-4959-8ec4-78b00780577f","HIGH_EPSS_DELTA","2025-11-22T04:05:46.133468+00:00","Daily EPSS score increased by 0.269 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":126,"version":127},1793202665836,"2.0",{"score":129,"band":130,"action":131,"scoredAt":132},53,"Medium","Plan remediation","2026-07-01T10:28:55.104789+00:00"]