Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.17
38 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-89060 | | Stolostron/multicluster-observability-addon: cross-namespace secret disclosure in multicluster-observability-addon via unvalidated config… | HIGH 7.7 | 0.5 % | ||
| CVE-2026-66786 | | Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets | CRITICAL 9.1 | 1.4 % | ||
| CVE-2026-73137 | | Multicloud-operators-subscription: multicloud-operators-subscription: cross-namespace secret exfiltration via helmrelease.repo.secretref.… | HIGH 7.7 | 0.5 % | ||
| CVE-2026-67567 | | Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespa… | CRITICAL 9.9 | 0.6 % | ||
| CVE-2026-66788 | corrigé en 1788023916 | Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-66787 | corrigé en 1788023916 | Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses | HIGH 8.7 | 0.3 % | ||
| CVE-2026-66785 | | Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack | HIGH 8.7 | 0.2 % | ||
| CVE-2026-76827 | | Search-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering) | MEDIUM 6.8 | 0.5 % | ||
| CVE-2026-76139 | | Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials | HIGH 8.0 | 0.7 % | ||
| CVE-2026-70496 | | Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and ma… | CRITICAL 9.9 | 0.6 % | ||
| CVE-2026-18874 | | Volsync-addon-controller: volsync-addon-controller: annotation values rendered into yaml via text/template without escaping allows yaml i… | MEDIUM 6.2 | 0.5 % | ||
| CVE-2026-71470 | | Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa | CRITICAL 9.1 | 0.7 % | ||
| CVE-2026-66780 | | Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-66783 | corrigé en 1788105072 | Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref | MEDIUM 4.4 | 0.4 % | ||
| CVE-2026-66782 | corrigé en 1788105072 | Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-66781 | | Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication | MEDIUM 5.4 | 0.4 % | ||
| CVE-2026-75485 | | Must-gather: /tmp/kubeconfig retention | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-73834 | | Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redaction | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-66793 | | Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annota… | HIGH 8.8 | 0.8 % | ||
| CVE-2026-71472 | | Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem | CRITICAL 9.1 | 0.9 % | ||
| CVE-2026-70495 | | Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters | HIGH 8.8 | 0.2 % | ||
| CVE-2026-66792 | | Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-71846 | | Insights-client: insights-client: clusterrole grants cluster-wide secrets get/list/watch beyond least privilege | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-71469 | | Acm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dos | HIGH 7.5 | 0.7 % | ||
| CVE-2026-71471 | | Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image | CRITICAL 9.0 | 1.2 % | ||
| CVE-2026-71473 | | Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spoke | HIGH 8.5 | 0.5 % | ||
| CVE-2026-72508 | | Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*) | CRITICAL 9.9 | 0.8 % | ||
| CVE-2026-64927 | | Multicloud-operators-channel: multicloud-operators-channel: cross-namespace secret and configmap mutation via spec.secretref.namespace co… | MEDIUM 6.4 | 0.3 % | ||
| CVE-2026-73122 | | Multicloud-operators-channel: multicloud-operators-channel: auto-generated role grants every managed-cluster agent secrets:get,list,watch… | HIGH 7.7 | 0.5 % | ||
| CVE-2026-66878 | | Multicloud-operators-subscription: multicloud-operators-subscription: fetchchannelreferences honours channel.spec.secretref.namespace ena… | HIGH 7.7 | 0.5 % | ||
| CVE-2026-70398 | | Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chos… | CRITICAL 9.6 | 0.5 % | ||
| CVE-2026-72526 | | Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalida… | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-71474 | | Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response | HIGH 7.1 | 0.2 % | ||
| CVE-2026-71468 | | Acm-search-v2-api-rhel9: search-v2-api: cross-user bearer-token reuse via global federation-config cache | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-71475 | corrigé en 1787227689 | Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url path | MEDIUM 6.8 | 0.7 % | ||
| CVE-2026-71845 | | Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault() | HIGH 7.7 | 0.5 % | ||
| CVE-2026-71467 | corrigé en 1787229541 | Acm-search-v2-api-rhel9: search-v2-api: authentication bypass on /federated via upgrade: websocket header spoofing | HIGH 7.5 | 0.8 % | ||
| CVE-2026-10090 | | Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebindin… | CRITICAL 9.0 | 0.6 % |