CVE-2025-6017
Rhacm: users with clusterreader role can see credentials from managed-clusters
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Rhacm: users with clusterreader role can see credentials from managed-clusters
A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.
Reserved 2025-06-11 | Published 2025-07-02 | Updated 2025-07-02 | Assigner redhatExposure of Private Personal Information to an Unauthorized Actor
| 2025-06-11: | Reported to Red Hat. |
| 2025-07-02: | Made public. |
access.redhat.com/security/cve/CVE-2025-6017
bugzilla.redhat.com/show_bug.cgi?id=2372362 (RHBZ#2372362)
Support options
