Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2026-66781 A flaw was found in the Submariner operator

Description

A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (PSK) in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by unauthorized parties. Such access enables an attacker to passively decrypt network traffic flowing between any two clusters in the mesh, resulting in sensitive information disclosure.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat Advanced Cluster Management for Kubernetes 2 Versions non publiées
Red Hat Advanced Cluster Management for Kubernetes 2.11 1787689013 premières → < 1787689013 1787689013
Red Hat Advanced Cluster Management for Kubernetes 2.13 1787365971 premières → < 1787365971 1787365971
Red Hat Advanced Cluster Management for Kubernetes 2.14 1787362756 premières → < 1787362756 1787362756
Red Hat Advanced Cluster Management for Kubernetes 2.15 1787362733 premières → < 1787362733 1787362733
Red Hat Advanced Cluster Management for Kubernetes 2.16 1790670912 premières → < 1790670912 1790670912
Red Hat Advanced Cluster Management for Kubernetes 2.17 1788073481 premières → < 1788073481 1788073481

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat Advanced Cluster Management for Kubernetes 2

Les 121 CVE de Red Hat Advanced Cluster Management for Kubernetes 2 →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-92982 A flaw was found in Ansible Operator Plugins 8.5 Élevée CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 Élevée CVE-2026-93685 A flaw was found in the multicluster-observability-addon 5.4 Moyenne
Suivre cette CVE