VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jul 28, 2021· Updated Jun 17, 2026

CVE-2021-32001

CVE-2021-32001

Description

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material (cluster certificate authority private keys, secrets encryption configuration passphrase, etc.) and decrypt it, without having to know the token value. This issue affects: SUSE Rancher K3s version v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1 and prior versions; RKE2 version v1.19.12+rke2r1, v1.20.8+rke2r1, v1.21.2+rke2r1 and prior versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • SUSE S.A./Rancher K3s4 versions
    cpe:2.3:a:suse:rancher_k3s:1.19.12:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:suse:rancher_k3s:1.19.12:*:*:*:*:*:*:*
    • cpe:2.3:a:suse:rancher_k3s:1.20.8:*:*:*:*:*:*:*
    • cpe:2.3:a:suse:rancher_k3s:1.21.2:*:*:*:*:*:*:*
    • (no CPE)range: v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1 and prior versions
  • SUSE S.A./Rancher Rke23 versions
    cpe:2.3:a:suse:rancher_rke2:1.19.12:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:suse:rancher_rke2:1.19.12:*:*:*:*:*:*:*
    • cpe:2.3:a:suse:rancher_rke2:1.20.8:*:*:*:*:*:*:*
    • cpe:2.3:a:suse:rancher_rke2:1.21.2:*:*:*:*:*:*:*
  • SUSE S.A./RKE2llm-fuzzy
    Range: v1.19.12+rke2r1, v1.20.8+rke2r1, v1.21.2+rke2r1 and prior versions
  • SUSE S.A./Ranchercpe-rescue
    Range: RKE2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.