Aller au contenu
en Se connecter
7.1 Élevée

CVE-2026-71474 A flaw was found in insights-client

Description

A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could grant unauthorized access to Red Hat cloud services.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat Advanced Cluster Management for Kubernetes 2 Versions non publiées
Red Hat Advanced Cluster Management for Kubernetes 2.11 1787688993 premières → < 1787688993 1787688993
Red Hat Advanced Cluster Management for Kubernetes 2.13 1787259125 premières → < 1787259125 1787259125
Red Hat Advanced Cluster Management for Kubernetes 2.14 1786882244 premières → < 1786882244 1786882244
Red Hat Advanced Cluster Management for Kubernetes 2.15 1787238585 premières → < 1787238585 1787238585
Red Hat Advanced Cluster Management for Kubernetes 2.16 1787184541 premières → < 1787184541 1787184541
Red Hat Advanced Cluster Management for Kubernetes 2.17 1787227689 premières → < 1787227689 1787227689
Red Hat Advanced Cluster Management for Kubernetes 2.14.0 1786882244 premières → < 1786882244 1786882244

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat Advanced Cluster Management for Kubernetes 2

Les 121 CVE de Red Hat Advanced Cluster Management for Kubernetes 2 →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne CVE-2026-92982 A flaw was found in Ansible Operator Plugins 8.5 Élevée CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 Élevée CVE-2026-93685 A flaw was found in the multicluster-observability-addon 5.4 Moyenne
Suivre cette CVE