CVEvulnerability

CVE-2025-6017

5.5 MEDIUM Published 2025-07-02 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-359

Description

A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.

Affected configurations

• redhat advanced cluster management for kubernetes (>= 2.10 < 2.10.7) • redhat advanced cluster management for kubernetes (>= 2.11 < 2.11.4) • redhat advanced cluster management for kubernetes (>= 2.12 < 2.12.4)

Related

Weakness · CWE (1)

  • CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness

References