Red Hat Enterprise Linux for Multicluster Engine for Kubernetes: Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• Medium 6.1
  CVE-2026-7163

  Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure

  A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbi…

  Red Hat multicluster engine for Kubernetes 2.9 multicluster engine for Kubernetes 2.11 multicluster engine for Kubernetes 2.1
  Apr 30, 2026

Revision history

1. 2026-05-18 #2

   Neue Updates von Red Hat aufgenommen

2. 2026-05-04 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:11511 vom 2026-05-04
  https://access.redhat.com/errata/RHSA-2026:11511
• Red Hat Security Advisory RHSA-2026:18584 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:18584
• Red Hat Security Advisory RHSA-2026:18585 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:18585