CVE-2025-6017mediumCWE-359

CVE-2025-6017: fallo de gravedad media en ocm

Rhacm: users with clusterreader role can see credentials from managed-clusters

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Red Hat Advanced Cluster Management for Kubernetes+ Monitorear ocm

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.5epss 0.2%
A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
ocmRed Hat · Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9