Summaryinfo

A vulnerability was found in rancher wrangler and classified as problematic. This issue affects some unknown processing of the component API. The manipulation results in missing encryption. This vulnerability is known as CVE-2022-43757. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Detailsinfo

A vulnerability was found in rancher wrangler (the affected version is unknown). It has been classified as problematic. Affected is an unknown code of the component API. The manipulation with an unknown input leads to a missing encryption vulnerability. CWE is classifying the issue as CWE-311. The product does not encrypt sensitive or critical information before storage or transmission. This is going to have an impact on confidentiality.

The weakness was published 01/25/2023. The advisory is shared for download at github.com. This vulnerability is traded as CVE-2022-43757 since 10/26/2022. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1600.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-0449). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• rancher

Name

• wrangler

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion