{"vulnerability": "cve-2021-3678", "sightings": [{"uuid": "c6d37153-011a-4b35-850e-35e43203ec8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36782", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "1565f272-67f2-4ed8-8524-a28d0e034b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36782", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:39.000000Z"}, {"uuid": "28a73f43-3019-4fc6-bf3b-bc79a6c4eb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36782", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:59.000000Z"}, {"uuid": "e3eb4d8d-f9f3-437e-b9a4-f7a1b3e4df02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36782", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/rancher_authenticated_api_cred_exposure.rb", "content": "", "creation_timestamp": "2024-04-19T18:10:30.000000Z"}, {"uuid": "de635620-f5c5-42e9-8bc2-cc89f5cf7c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36784", "type": "seen", "source": "https://t.me/cibsecurity/41710", "content": "\u203c CVE-2021-36784 \u203c\n\nA Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-02T16:27:43.000000Z"}, {"uuid": "e604b09b-d5a5-49b7-91d0-223a3aaa8724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3678", "type": "seen", "source": "https://t.me/cibsecurity/26818", "content": "\u203c CVE-2021-3678 \u203c\n\nshowdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-04T19:24:35.000000Z"}, {"uuid": "ba80bcfb-43e2-41d3-9c48-ece84ebce7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36788", "type": "seen", "source": "https://t.me/cibsecurity/27331", "content": "\u203c CVE-2021-36788 \u203c\n\nThe yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-13T20:41:32.000000Z"}, {"uuid": "2e7b4e0e-2e8a-42f6-9531-3476e865ee8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36785", "type": "seen", "source": "https://t.me/cibsecurity/27322", "content": "\u203c CVE-2021-36785 \u203c\n\nThe miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-13T20:41:19.000000Z"}, {"uuid": "7c3d3903-3f95-458a-9ded-dd495e09cb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36787", "type": "seen", "source": "https://t.me/cibsecurity/27317", "content": "\u203c CVE-2021-36787 \u203c\n\nThe femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-13T20:41:12.000000Z"}, {"uuid": "f68ba267-1f08-456f-876e-5edc9dc7041b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36782", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/rancher_authenticated_api_cred_exposure.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"Florian Struck\", \"Marco Stuurman\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An issue was discovered in Rancher versions up to and including\\n          2.5.15 and 2.6.6 where sensitive fields, like passwords, API keys\\n          and Ranchers service account token (used to provision clusters),\\n          were stored in plaintext directly on Kubernetes objects like Clusters,\\n          for example cluster.management.cattle.io. Anyone with read access to\\n          those objects in the Kubernetes API could retrieve the plaintext\\n          version of those sensitive data.\", \"disclosure_date\": \"2022-08-18\", \"fullname\": \"auxiliary/gather/rancher_authenticated_api_cred_exposure\", \"is_install_path\": true, \"mod_time\": \"2026-02-09 15:17:23 +0000\", \"name\": \"Rancher Authenticated API Credential Exposure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": []}, \"path\": \"/modules/auxiliary/gather/rancher_authenticated_api_cred_exposure.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"gather/rancher_authenticated_api_cred_exposure\", \"references\": [\"GHSA-g7j7-h4q8-8w2f\", \"URL-https://github.com/fe-ax/tf-cve-2021-36782\", \"URL-https://fe.ax/cve-2021-36782/\", \"CVE-2021-36782\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:21.218901Z"}]}