10

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2023-32191

CVE-2023-32191: rke's credentials are stored in the RKE1 Cluster state ConfigMap

Impact

When RKE provisions a cluster, it stores the cluster state in a configmap called full-cluster-state inside the kube-system namespace of the cluster itself. This cluster state object contains information used to set up the K8s cluster, which may include the following sensitive data:

RancherKubernetesEngineConfig
- RKENodeConfig
  - SSH username
  - SSH private key
  - SSH private key path
- RKEConfigServices
  - ETCDService
    - External client key
    - BackupConfig
      - S3BackupConfig
        
        AWS access key
        
        AWS secret key
  - KubeAPIService
    - SecretsEncryptionConfig
      - K8s encryption configuration (contains encryption keys)
- PrivateRegistries
  - User
  - Password
  - ECRCredentialPlugin
    - AWS access key
    - AWS secret key
    - AWS session token
- CloudProvider
  - AzureCloudProvider
    - AAD client ID
    - AAD client secret
    - AAD client cert password
  - OpenstackCloudProvider
    - Username
    - User ID
    - Password
  - VsphereCloudProvider
    - GlobalVsphereOpts
      - User
      - Password
    - VirtualCenterConfig
      - User
      - Password
  - HarvesterCloudProvider
    - CloudConfig
  - CustomCloudProvider
- BastionHost
  - User
  - SSH key

Miggo Vulnerability Database

→

CVE-2023-32191

CVE-2023-32191:

10

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/rancher/rke	go	>= 1.4.18, < 1.4.19	1.4.19
github.com/rancher/rke	go	>= 1.5.9, < 1.5.10	1.5.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The core vulnerability stems from using ConfigMaps (world-readable in Kubernetes) to store sensitive credentials. The original SaveFullStateToKubernetes function explicitly wrote cluster state to a ConfigMap using k8s.UpdateConfigMap. The patch replaces this with SaveFullStateToK8s which uses Secrets and removes the ConfigMap. GetStateFromKubernetes is medium confidence as it interacted with the vulnerable storage mechanism but wasn't the primary exposure vector.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

10

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2023-32191: rke's credentials are stored in the RKE1 Cluster state ConfigMap

Impact

CVE-2023-32191:

10

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Detect and Respond To Threats Faster.

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

10

10

Technical Details

CVE-2023-32191: rke's credentials are stored in the RKE1 Cluster state ConfigMap

Impact

Patches

Workarounds

For more information

10

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2023-32191: rke's credentials are stored in the RKE1 Cluster state ConfigMap

Impact

CVE-2023-32191:

10

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

10

10

Technical Details

CVE-2023-32191: rke's credentials are stored in the RKE1 Cluster state ConfigMap

Impact

Patches

Workarounds

For more information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI