Aller au contenu
en Se connecter
8.2 Élevée

CVE-2026-4740 A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM)

Description

A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This enables cross-cluster privilege escalation and may allow an attacker to gain control over other managed clusters, including the hub cluster.

Produits et versions touchés

Produit Versions touchées Corrigé en
Multicluster Engine for Kubernetes Versions non publiées
multicluster engine for Kubernetes 2.11 1777478390 premières → < 1777478390 1777478390
multicluster engine for Kubernetes 2.6 1775977180 premières → < 1775977180 1775977180
multicluster engine for Kubernetes 2.9 1776445095 premières → < 1776445095 1776445095
multicluster engine for Kubernetes 2.1 1776881164 premières → < 1776881164 1776881164
multicluster engine for Kubernetes 2.8 1775638726 premières → < 1775638726 1775638726
multicluster engine for Kubernetes 2.10 1776881164 premières → < 1776881164 1776881164
multicluster engine for Kubernetes 2.11.0 1777478390 premières → < 1777478390 1777478390
multicluster engine for Kubernetes 2.9.0 1776445095 premières → < 1776445095 1776445095

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Multicluster Engine for Kubernetes

Les 79 CVE de Multicluster Engine for Kubernetes →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-114236 storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a… 3.3 Faible CVE-2026-71297 A flaw was found in the maestro gRPC broker 5.4 Moyenne CVE-2026-71299 A flaw was found in Maestro 6.5 Moyenne
Suivre cette CVE