A vulnerability in SUSE Rancher allows authenticated users to access sensitive credentials within Helm values, posing a significant risk of unauthorized data exposure.

This vulnerability involves the cleartext storage of sensitive information (CWE-312) within BundleDeployment resources. Any user possessing GET or LIST permissions can retrieve these secrets, representing an authentication-dependent privilege escalation of data access.

The exposure of cleartext credentials and secrets stored within Helm values can lead to broad unauthorized access across the enterprise infrastructure. Given the CVSS score of 7.7, this vulnerability is classified as High severity, as it facilitates the compromise of sensitive environment configuration data, which could be leveraged to escalate privileges or move laterally through the organization's containerized environment.

Immediate Action: Upgrade to the patched versions of SUSE Rancher as specified in the affected versions list to ensure sensitive information is no longer exposed through API queries.

Proactive Monitoring: Review audit logs for suspicious or high-frequency access to BundleDeployment resources by non-administrative service accounts or users.

Compensating Controls: Implement strict Role-Based Access Control (RBAC) to limit the number of users with GET or LIST permissions on BundleDeployment resources until the patch can be deployed.

Public Exploit Available: Unknown

This vulnerability presents a clear risk to the integrity of secrets managed within the Rancher environment. Administrators should prioritize updating their instances immediately to the provided fixed versions to prevent the unauthorized disclosure of sensitive credentials.