open-cluster-management.io/ocm

2 results · Clear filters · Feed

• High 8.2
  CVE-2026-4740

  Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation

  A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can …

  Red Hat Multicluster Engine for Kubernetes multicluster engine for Kubernetes 2.9 multicluster engine for Kubernetes 2.6 Go
  Apr 7, 2026
• High 7.5
  CVE-2024-9779

  Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens

  A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound…

  Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 open-cluster-management.io/ocm Go
  Dec 17, 2024