CVE-2025-6017
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-07-02
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| — | — | 0 < 0.16.0 |
| redhat | advanced_cluster_management_for_kubernetes | 2.10 – 2.10.7 |
References & Advisories (4)
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT