x/vulndb: potential Go vuln in github.com/rancher/rancher: CVE-2022-21951

[GoVulnBot]

CVE-2022-21951 references github.com/rancher/rancher, which may be a Go module.

Description:
A Missing Encryption of Sensitive Data vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden
This issue affects:
SUSE Rancher
Rancher versions prior to 2.5.14;
Rancher versions prior to 2.6.5.

Links:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2022-21951
• JSON: https://github.com/CVEProject/cvelist/tree/a07c1c5c5fae750253ac63b7dbe2940ad361e666/2022/21xxx/CVE-2022-21951.json
• https://bugzilla.suse.com/show_bug.cgi?id=1199443
• GHSA-vrph-m5jj-c46c

See doc/triage.md for instructions on how to triage this report.

module: github.com/rancher/rancher
package: Rancher
description: |
    A Missing Encryption of Sensitive Data vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden
    This issue affects:
    SUSE Rancher
    Rancher versions prior to 2.5.14;
    Rancher versions prior to 2.6.5.
cves:
  - CVE-2022-21951
links:
    context:
      - https://bugzilla.suse.com/show_bug.cgi?id=1199443
      - https://github.com/rancher/rancher/security/advisories/GHSA-vrph-m5jj-c46c

[neild]

Vulnerability in tool.

[gopherbot]

Change https://go.dev/cl/592768 mentions this issue: data/reports: unexclude 50 reports