Aller au contenu
en Se connecter
5.3 Moyenne

CVE-2026-71468 A flaw was found in acm-search-v2-api-rhel9

Description

A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authenticated users to gain unauthorized access to remote managed hub search results, leading to information disclosure.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat Advanced Cluster Management for Kubernetes 2 Versions non publiées
Red Hat Advanced Cluster Management for Kubernetes 2.11 1787689524 premières → < 1787689524 1787689524
Red Hat Advanced Cluster Management for Kubernetes 2.13 1787263804 premières → < 1787263804 1787263804
Red Hat Advanced Cluster Management for Kubernetes 2.14 1786723845 premières → < 1786723845 1786723845
Red Hat Advanced Cluster Management for Kubernetes 2.15 1787238618 premières → < 1787238618 1787238618
Red Hat Advanced Cluster Management for Kubernetes 2.16 1787191668 premières → < 1787191668 1787191668
Red Hat Advanced Cluster Management for Kubernetes 2.17 1787229541 premières → < 1787229541 1787229541
Red Hat Advanced Cluster Management for Kubernetes 2.14.0 1786723845 premières → < 1786723845 1786723845

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat Advanced Cluster Management for Kubernetes 2

Les 121 CVE de Red Hat Advanced Cluster Management for Kubernetes 2 →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-92982 A flaw was found in Ansible Operator Plugins 8.5 Élevée CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 Élevée CVE-2026-93685 A flaw was found in the multicluster-observability-addon 5.4 Moyenne
Suivre cette CVE