Skip to main content

Advanced Cluster Management For Kubernetes CVE-2025-6017

| EUVDEUVD-2025-19692 MEDIUM
Exposure of Private Personal Information to an Unauthorized Actor (CWE-359)
2025-07-02 secalert@redhat.com
Information Disclosure Red Hat Advanced Cluster Management For Kubernetes
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Red Hat
5.5 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 16, 2026 - 01:55 euvd
EUVD-2025-19692
Analysis Generated
Mar 16, 2026 - 01:55 vuln.today
CVE Published
Jul 02, 2025 - 07:15 nvd
MEDIUM 5.5

DescriptionCVE.org

A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.

AnalysisAI

A security vulnerability in Red Hat Advanced Cluster Management (CVSS 5.5) that allows an unprivileged user. Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor. Affects Red Hat Advanced Cluster Management.

RemediationAI

Monitor vendor channels for patch availability.

More in Advanced Cluster Management For Kubernetes

View all
CVE-2023-44487 HIGH POC
7.5 Oct 10

Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
CVE-2023-3027 HIGH
7.8 Jun 05

The grc-policy-propagator allows security escalation within the cluster. Rated high severity (CVSS 7.8), this vulnerabil
CVE-2026-71845 HIGH
7.7 Aug 11

Token credential exposure in Red Hat insights-client causes the CCX_TOKEN bearer credential, used exclusively in disconn
CVE-2022-27191 HIGH
7.5 Mar 18

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server
CVE-2026-71474 MEDIUM
6.5 Aug 11

Credential exposure in Red Hat insights-client leaks the cloud.openshift.com pull-secret token into pod logs whenever th
CVE-2022-2238 MEDIUM
6.5 Sep 01

A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query
CVE-2020-25655 MEDIUM
6.5 Nov 09

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct
CVE-2026-71475 MEDIUM
5.0 Aug 11

Path traversal in Red Hat insights-client allows a compromised spoke (managed cluster) to inject unencoded sequences int
CVE-2020-25688 LOW
3.5 Nov 23

A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Rated low severity (CVSS 3.5), this vulnerability is l

Same weakness CWE-359 – Exposure of Private Personal Information to an Unauthorized Actor

View all
CVE-2024-11396 MEDIUM POC
5.3
CVE-2022-0482 CRITICAL POC
9.1
CVE-2025-54125 HIGH POC
8.7
CVE-2022-2921 HIGH POC
8.8
CVE-2019-25762 HIGH POC
8.7
CVE-2024-10267 HIGH POC
7.5
CVE-2020-37173 HIGH POC
7.5
CVE-2025-65857 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

Share

CVE-2025-6017 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy