multicluster engine for Kubernetes 2.7

2 results · Clear filters · Feed

• Medium 6.1
  CVE-2026-7163

  Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure

  A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbi…

  Red Hat multicluster engine for Kubernetes 2.9 multicluster engine for Kubernetes 2.11 multicluster engine for Kubernetes 2.1
  Apr 30, 2026
• Medium 6.4
  CVE-2025-7195

  Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

  Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 duri…

  Red Hat operator-framework Red Hat Advanced Cluster Management for Kubernetes 2 Red Hat Advanced Cluster Management for Kubernetes 2.14 Go
  Aug 7, 2025