Approved changes feed: RSS · Atom
cpe:2.3:a:suse:rke:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Rke (033be7f0-990e-51ec-8c7b-f46e162c3b07) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32191 |
vulnerable | 2026-06-08 06:04:45.119346 |
rke's credentials are stored in the RKE1 Cluster state ConfigMap
CRITICAL (9.9)
When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin.
Published: 2024-10-16T12:17:02.324Z
Updated: 2024-10-16T15:58:10.698Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.