VulnerabilityAnalyzed
CVE-2025-6017
This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI.
MEDIUM 5.5EPSS 0.13%
Does this matter?
Lower severity and a low EPSS score (0.13%). Track it; it rarely justifies an emergency change on its own.
Description
A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.13% probability · 3th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-359
- Affected
- redhat/advanced cluster management for kubernetes
- Source
- secalert@redhat.com
References
- https://access.redhat.com/security/cve/CVE-2025-6017Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2372362Issue Tracking, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.