CVE-2025-6017

5.5 mediumEPSS 0.1%

A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-30)
CWE: CWE-359
Published: 2025-07-02
Modified: 2026-10-30
Record from: the NVD, synced 2026-10-30

Affected

redhat:advanced_cluster_management_for_kubernetes

References

https://access.redhat.com/errata/RHBA-2025:11623
https://access.redhat.com/errata/RHBA-2025:9225
https://access.redhat.com/security/cve/CVE-2025-6017
https://bugzilla.redhat.com/show_bug.cgi?id=2372362

Check your stack JSON