Skip to content
OpenAdvisories

Package · Go

github.com/openshift/hive

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.3
    CVE-2024-25132

    Openshift-dedicated: hive: hibernation controller denial of service

    A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan …

    github.com/openshift/hive Go
  • High 8.2
    CVE-2025-2241

    Hive: exposure of vcenter credentials via clusterprovision in hive / mce / acm

    A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access t…

    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 Multicluster Engine for Kubernetes github.com/openshift/hive Go
  • High 8.8
    CVE-2024-25133

    Openshift-dedicated: hive: rce through aws/kubernetes client configuration leads to privilege escalation

    A flaw was found in the Hive ClusterDeployments resource in OpenShift Dedicated. In certain conditions, this issue may allow a developer account on a Hive-enabled cluster to obtain cluster-admin privileges by executing arbitrary commands on the hive/hive-cont…

    github.com/openshift/hive Go