CVE-2023-32191 — rke's credentials are stored in the RKE1 Cluster state ConfigMap
When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. The information a…
Published: 2024-10-16 · CVSS: 9.9 · CVSS 3.1
When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7