x/vulndb: potential Go vuln in github.com/rancher/rancher: CVE-2021-36783

[GoVulnBot]

CVE-2021-36783 references github.com/rancher/rancher, which may be a Go module.

Description:
A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API endpoints.
This issue affects:
SUSE Rancher
Rancher versions prior to 2.6.4;
Rancher versions prior to 2.5.13.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2021-36783
• JSON: https://github.com/CVEProject/cvelist/tree/6a9bf4ed6f20fd1b925c11db4c42684ec0d8ca2b/2021/36xxx/CVE-2021-36783.json
• web: https://bugzilla.suse.com/show_bug.cgi?id=1193990
• web: GHSA-8w87-58w6-hfv8
• Imported by: https://pkg.go.dev/github.com/rancher/rancher?tab=importedby

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: github.com/rancher/rancher
    packages:
      - package: Rancher
description: |
    A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API endpoints.
    This issue affects:
    SUSE Rancher
    Rancher versions prior to 2.6.4;
    Rancher versions prior to 2.5.13.
cves:
  - CVE-2021-36783
references:
  - web: https://bugzilla.suse.com/show_bug.cgi?id=1193990
  - web: https://github.com/rancher/rancher/security/advisories/GHSA-8w87-58w6-hfv8

[gopherbot]

Change https://go.dev/cl/432777 mentions this issue: data/excluded: add GO-2022-0974.yaml for CVE-2021-36783

[gopherbot]

Change https://go.dev/cl/592774 mentions this issue: data/reports: unexclude 50 reports