Description (CNA)
A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to manipulate how the system handles sensitive information, known as Secrets, across different parts of the system (namespaces). By exploiting this, an attacker can modify these Secrets in unauthorized areas. This could lead to unauthorized access to information or elevated privileges within the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.11 | unaffected 1787260663 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.13 | unaffected 1787259310 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14 | unaffected 1787172840 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.15 | unaffected 1787238600 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.16 | unaffected 1787242105 before * |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.17 | unaffected 1787242099 before * |
CWE
CWE-639
References
- https://access.redhat.com/errata/RHSA-2026:60386
- https://access.redhat.com/errata/RHSA-2026:60387
- https://access.redhat.com/errata/RHSA-2026:60388
- https://access.redhat.com/errata/RHSA-2026:60389
- https://access.redhat.com/errata/RHSA-2026:60390
- https://access.redhat.com/errata/RHSA-2026:60391
- https://access.redhat.com/security/cve/CVE-2026-64927
- https://bugzilla.redhat.com/show_bug.cgi?id=2514229
ADP enrichment
No English description supplied.
No references supplied.