A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.
References
Configurations
No configuration.
History
03 Jul 2025, 15:13
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-02 07:15
Updated : 2025-07-03 15:13
NVD link : CVE-2025-6017
Mitre link : CVE-2025-6017
CVE.ORG link : CVE-2025-6017
JSON object : View
Products Affected
No product.
CWE
CWE-359
Exposure of Private Personal Information to an Unauthorized Actor